Siemens RUGGEDCOM ROX II

🗓️ 09 Feb 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 64 Views

Siemens RUGGEDCOM ROX II Vulnerabilities: Improper Input Validation, NULL Pointer Dereference, Out-of-Bounds Write, Insufficient Verification of Data Authenticity, Improper Certificate Validatio

Reporter	Title	Published	Views	Family All 419
IBM Security Bulletins	Security Bulletin: Publicly disclosed vulnerability from Libreswan affects IBM Netezza Host Management	10 Aug 202007:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in nss and nspr CVE-2019-17006.	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities	12 Jan 202110:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework v1 (CentOS6) is End of Life	14 Dec 202120:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	29 Apr 202502:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2019-11745)	12 Jan 202120:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected by multiple vulnerabilities	29 Aug 202019:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2019-17006, CVE-2019-17023, CVE-2020-12403)	8 Jul 202117:59	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerabilitiy has been fixed in IBM Security Identity Manager Virtual Appliance(CVE-2019-17006)	20 May 202118:59	–	ibm

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-379803.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-040-04.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-040-04
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

09 Feb 2021 00:00Current

9.4High risk

Vulners AI Score9.4

CVSS 210

CVSS 3.17.5 - 9.8

EPSS0.03552