The vulnerability of the microprogramming software for RUGGEDCOM ROS, related to the disclosure of system data by unauthorized parties in the controlled area, allows a intruder to disclose protected information.

🗓️ 25 Jul 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

A microprogramming flaw in RuggedCom ROS can disclose system data in the controlled area to unauthorized remote attackers.

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2024-39675	9 Jul 202414:46	–	circl
CNNVD	Siemens RUGGEDCOM Series 安全漏洞	9 Jul 202400:00	–	cnnvd
CNVD	Siemens RUGGEDCOM ROS Information Disclosure Vulnerability (CNVD-2024-31234)	10 Jul 202400:00	–	cnvd
CVE	CVE-2024-39675	9 Jul 202412:05	–	cve
Cvelist	CVE-2024-39675	9 Jul 202412:05	–	cvelist
EUVD	EUVD-2024-38180	3 Oct 202520:07	–	euvd
ICS	Siemens RUGGEDCOM	9 Jul 202400:00	–	ics
NCSC	Vulnerabilities fixed in Siemens Products	9 Jul 202418:40	–	ncsc
NVD	CVE-2024-39675	9 Jul 202412:15	–	nvd
Positive Technologies	PT-2024-5179 · Siemens · Ruggedcom Rs920L +10	9 Jul 202400:00	–	ptsecurity

Vulners

Node

siemens_ag ruggedcom_rsg2100nc(32m)Range5.0.0–5.9.0

OR

siemens_ag ruggedcom_rst916pRange<5.9.0

OR

siemens_ag ruggedcom_rst916cRange<5.9.0

OR

siemens_ag ruggedcom_rst2228Range<5.9.0

OR

siemens_ag ruggedcom_rst2228pRange<5.9.0

OR

siemens_ag ruggedcom_rsl910Range<5.9.0

OR

siemens_ag ruggedcom_rsg910cRange<5.9.0

OR

siemens_ag ruggedcom_rsg907rRange<5.9.0

OR

siemens_ag ruggedcom_rsg908cRange<5.9.0

OR

siemens_ag ruggedcom_rsg909rRange<5.9.0

OR

siemens_ag ruggedcom_rsg2300pRange5.0.0–5.9.0

OR

siemens_ag ruggedcom_rsg2300Range5.0.0–5.9.0

OR

siemens_ag ruggedcom_rsg2288Range5.0.0–5.9.0

OR

siemens_ag ruggedcom_rs900g_(32m)Range5.0.0–5.9.0

OR

siemens_ag ruggedcom_rs900_(32m)Range5.0.0–5.9.0

OR

siemens_ag ruggedcom_rmc30ncRange<4.3.10

OR

siemens_ag ruggedcom_rp110ncRange<4.3.10

OR

siemens_ag ruggedcom_rs400ncRange<4.3.10

OR

siemens_ag ruggedcom_rs401ncRange<4.3.10

OR

siemens_ag ruggedcom_rs416ncRange<4.3.10

OR

siemens_ag ruggedcom_rs416pncRange<4.3.10

OR

siemens_ag ruggedcom_rmc30Range<4.3.10

OR

siemens_ag ruggedcom_rp110Range<4.3.10

OR

siemens_ag ruggedcom_rs400Range<4.3.10

OR

siemens_ag ruggedcom_rs401Range<4.3.10

OR

siemens_ag ruggedcom_rs416Range<4.3.10

OR

siemens_ag ruggedcom_rs910Range<4.3.10

OR

siemens_ag ruggedcom_rs910wRange<4.3.10

OR

siemens_ag ruggedcom_rs416nc_2Range<4.3.10

OR

siemens_ag ruggedcom_rs416nc_2Range<5.9.0

OR

siemens_ag ruggedcom_rs416pRange<4.3.10

OR

siemens_ag ruggedcom_rs416pnc_2Range<4.3.10

OR

siemens_ag ruggedcom_rs416pnc_2Range<5.9.0

OR

siemens_ag ruggedcom_rs910ncRange<4.3.10

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-170375.html
web	www.web.nvd.nist.gov/view/vuln/detail

25 Jul 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 28.3

CVSS 38.8

EPSS0.00282

RuggedCom ROS microprogramming vulnerability system data disclosure controlled area remote attacker protected information