RuggedCom ROS Multiple Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-6926US | high8.0OT erhöht | — | ||
The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended restrictions on administrative actions by leveraging access… | ||||
| CVE-2013-6925US | high8.3OT erhöht | — | ||
The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-13-340-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-13-340-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationRuggedCom devices with ROS firmware
Siemens has produced a firmware update, RuggedCom ROS V3.12.2, which resolves these vulnerabilities. Asset owners and operators should contact Siemens customer support to acquire the update.
- MitigationRuggedCom devices with ROS firmware
Siemens has produced a firmware update, RuggedCom ROS V3.12.2, which resolves these vulnerabilities. Asset owners and operators should contact Siemens customer support to acquire the update.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan