SSA-459643

csafDEsiemens_psirt

SSA-459643: Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0

Advisory ansehen veröffentlicht 2022-09-13

RUGGEDCOM ROS-based devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP connections. The web server recovers by itself once the attack ends. Siemens has released updates for the affected products and recommends to update to the latest versions.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-39158US——
A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGE…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (64)

  • Kein Fix verfügbarRUGGEDCOM RMC8388NC V5.X

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RS416NC v2

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RS416PNC v2

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RS900GNC(32M) V5.X

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RS900NC(32M) V5.X

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG2100NC(32M) V5.X

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG2288NC V5.X

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG2300NC V5.X

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG2300PNC V5.X

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG2488NC V5.X

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG920PNC V5.X

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSL910NC

    Currently no fix is available

  • BehobenRUGGEDCOM RMC8388 V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RS416Pv2

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RS416v2

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RS900 (32M) V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RS900G (32M) V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RSG2100 (32M) V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RSG2288 V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RSG2300 V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RSG2300P V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RSG2488 V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RSG907R

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RSG908C

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RSG909R

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RSG910C

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RSG920P V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RSL910

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RST2228

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RST2228P

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RST916C

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • BehobenRUGGEDCOM RST916P

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • WorkaroundRUGGEDCOM RMC8388 V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RMC8388NC V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS416NC v2

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS416PNC v2

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS416Pv2

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS416v2

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS900 (32M) V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS900G (32M) V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS900GNC(32M) V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS900NC(32M) V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2100 (32M) V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2100NC(32M) V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2288 V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2288NC V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2300 V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2300NC V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2300P V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2300PNC V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2488 V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2488NC V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG907R

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG908C

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG909R

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG910C

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG920P V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG920PNC V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSL910

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSL910NC

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RST2228

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RST2228P

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RST916C

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RST916P

    Deactivate the webserver if not required, and if deactivation is supported by the product

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan