CVE-2018-18440
highPriorität · verfolgen · 31EPSS 0.006 · 48. PerzentilDEEUUSEPSS · bewertet 2026-10-27
DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationRUGGEDCOM RMC8388 V4.Xsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RMC8388 V5.Xsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RMC8388NC V4.Xsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RMC8388NC V5.Xsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG2488 V4.Xsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG2488 V5.Xsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG2488NC V4.Xsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG2488NC V5.Xsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG907Rsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG908Csiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG909Rsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG910Csiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG920P V4.Xsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG920P V5.Xsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG920PNC V4.Xsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG920PNC V5.Xsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSL910siemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSL910NCsiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RST2228siemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RST2228Psiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RST916Csiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RST916Psiemens_psirt
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RMC8388 V4.Xcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RMC8388 V5.Xcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RMC8388NC V4.Xcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RMC8388NC V5.Xcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG2488 V4.Xcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG2488 V5.Xcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG2488NC V4.Xcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG2488NC V5.Xcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG907Rcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG908Ccisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG909Rcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG910Ccisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG920P V4.Xcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG920P V5.Xcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG920PNC V4.Xcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSG920PNC V5.Xcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSL910cisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RSL910NCcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RST2228cisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RST2228Pcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RST916Ccisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- MitigationRUGGEDCOM RST916Pcisa_csaf_ot
Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.
- Kein Fix verfügbarRUGGEDCOM RMC8388 V5.Xsiemens_psirt
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RMC8388NC V4.Xsiemens_psirt
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RSG2488NC V4.Xsiemens_psirt
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RSG2488NC V5.Xsiemens_psirt
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RSG920PNC V4.Xsiemens_psirt
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RSG920PNC V5.Xsiemens_psirt
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RST2228Psiemens_psirt
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RMC8388 V5.Xcisa_csaf_ot
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RMC8388NC V4.Xcisa_csaf_ot
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RSG2488NC V4.Xcisa_csaf_ot
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RSG2488NC V5.Xcisa_csaf_ot
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RSG920PNC V4.Xcisa_csaf_ot
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RSG920PNC V5.Xcisa_csaf_ot
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM RST2228Pcisa_csaf_ot
Currently no fix is available
- Kein Fix geplantRUGGEDCOM RMC8388 V4.Xsiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RMC8388NC V5.Xsiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG2488 V4.Xsiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG2488 V5.Xsiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG907Rsiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG908Csiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG909Rsiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG910Csiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG920P V4.Xsiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG920P V5.Xsiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSL910siemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSL910NCsiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RST2228siemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RST916Csiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RST916Psiemens_psirt
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RMC8388 V4.Xcisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RMC8388NC V5.Xcisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG2488 V4.Xcisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG2488 V5.Xcisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG907Rcisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG908Ccisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG909Rcisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG910Ccisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG920P V4.Xcisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSG920P V5.Xcisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSL910cisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RSL910NCcisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RST2228cisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RST916Ccisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantRUGGEDCOM RST916Pcisa_csaf_ot
Currently no fix is planned
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (69)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-618620SSA-618620: Vulnerabilities in Boot Loader (U-Boot) of RUGGEDCOM ROS Devices2019-12-10csaf · siemens_psirtDE
The boot loader within RUGGEDCOM ROS contains two vulnerabilities in the loading process of the operating system kernel. The more severe of these vulnerabilities could allow an attacker with local access to the device to execute arbitrary code on an affected device. Siemens recommends specific countermeasures to mitigate this issue.
- ICSA-19-344-03Siemens RUGGEDCOM ROS (Update A)2019-12-10icsa · cisa_csaf_otUS
The boot loader within RUGGEDCOM ROS contains two vulnerabilities in the loading process of the operating system kernel. The more severe of these vulnerabilities could allow an attacker with local access to the device to execute arbitrary code on an affected device. Siemens recommends specific countermeasures to mitigate this issue.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (10)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.openwall.com/lists/oss-security/2018/11/02/2cnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-618620.pdfcnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-19-344-03cnnvd
- https://vigilance.fr/vulnerability/RUGGEDCOM-ROS-two-vulnerabilities-31130cnnvd
- https://www.auscert.org.au/bulletins/ESB-2019.4624/cnnvd
- https://www.us-cert.gov/ics/advisories/icsa-19-344-03cnnvd
- http://www.openwall.com/lists/oss-security/2018/11/02/2enisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-618620.pdfenisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan