SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products
A vulnerability in the RUGGEDCOM ROX devices' third party component, NSS, could allow an attacker to remotely execute code or cause a denial-of-service condition due to the way it verifies security certificates. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-43527US | critical9.8 | — | ||
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS f… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products - CSAF Versionself
- SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products - PDF Versionself
- SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products - TXT Versionself
Behebungen (20)
- MitigationRUGGEDCOM ROX MX5000
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1400
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1500
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1501
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1510
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1511
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1512
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1524
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1536
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX5000
Reconfigure IPsec connections to use a pre-shared key (PSK).
- BehobenRUGGEDCOM ROX MX5000
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1400
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1500
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1501
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1510
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1511
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1512
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1524
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1536
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX5000
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan