Siemens ROS Improper Input Validation (Update A)

🗓️ 29 Dec 2014 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 50 Views

Siemens ROS Improper Input Validation (Update A) discusses an improper input validation vulnerability in Siemens Rugged Operating System (ROS) leading to denial-of-service (DoS) attacks via the web interface. Affected products include all ROS versions prior to v3.11, ROS v3.11 (for product RS950G) all versions prior to ROS v3.11.5, ROS v3.12 all versions prior to ROS v3.12.4, and ROS v4.0 (for product RSG2488) all versions prior to ROS v4.1.0. A manual cold restart is required to regain access after an attack

Reporter	Title	Published	Views	Family All 8
Tenable Nessus	RuggedCom Rugged Operating System < 4.1 (or 3.11.5 for RS950G) Remote Denial of Service	19 Feb 201300:00	–	nessus
Tenable Nessus	RuggedCom RuggedOS HTTP Traffic Handling Remote DoS	15 Apr 201400:00	–	nessus
CVE	CVE-2014-2590	28 Mar 201419:00	–	cve
Cvelist	CVE-2014-2590	28 Mar 201419:00	–	cvelist
EUVD	EUVD-2014-2622	7 Oct 202500:30	–	euvd
NVD	CVE-2014-2590	1 Apr 201406:29	–	nvd
Prion	Design/Logic Flaw	1 Apr 201406:29	–	prion
seebug.org	RuggedCom Rugged Operating System WEB接口拒绝服务漏洞	1 Apr 201400:00	–	seebug

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2014/icsa-14-087-01a.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-14-087-01a
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

29 Dec 2014 07:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

EPSS0.02413