Siemens RUGGEDCOM

🗓️ 09 Jul 2024 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 31 Views

Siemens RUGGEDCOM product vulnerabilities no longer updated by CISA. CVSS v4 8.7, remote exploitation, sensitive info exposure, privilege assignment, and system info exposure. Affected products: RUGGEDCOM i800, i801, i802, i803, M969, M2100, M2200, RMC30, RMC8388, RP110, RS400, RS401, RS416. View CSAF for details

Reporter	Title	Published	Views	Family All 36
BDU FSTEC	The vulnerability of the IP-packet forwarding function in RUGGEDCOM Ethernet switches’ microprogrammed software allows a perpetrator to gain unauthorized access to protected information.	19 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of RUGGEDCOM microprogrammed Ethernet switches’ web servers allows attackers to gain unauthorized access to the hash values and passwords of all system users.	24 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software for RUGGEDCOM ROS, related to the disclosure of system data by unauthorized parties in the controlled area, allows a intruder to disclose protected information.	25 Jul 202400:00	–	bdu_fstec
Circl	CVE-2024-39675	9 Jul 202414:46	–	circl
CNNVD	Siemens RUGGEDCOM Series 安全漏洞	9 Jul 202400:00	–	cnnvd
CNNVD	Siemens RUGGEDCOM 安全漏洞	9 Jul 202400:00	–	cnnvd
CNNVD	Siemens RUGGEDCOM Series 信息泄露漏洞	9 Jul 202400:00	–	cnnvd
CNVD	Siemens RUGGEDCOM ROS Information Disclosure Vulnerability (CNVD-2024-31234)	10 Jul 202400:00	–	cnvd
CNVD	Siemens RUGGEDCOM ROS Incorrect Privilege Assignment Vulnerability	10 Jul 202400:00	–	cnvd
CNVD	Siemens RUGGEDCOM ROS Information Disclosure Vulnerability	10 Jul 202400:00	–	cnvd

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-170375.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-170375.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-193-06.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-193-06
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

09 Jul 2024 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.18.8

CVSS 48.7

EPSS0.00146

SSVC