CVE-2015-7836

Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame...

CVE-2015-7836

Siemens RuggedCom ROS

PT-2015-7635

Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROS versions prior to 4.2.1 Description The issue allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame. Recommendations For versions pri...

CVE-2015-7836: Exposure of Sensitive Information to an Unauthorized Actor

Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame...

Siemens RUGGEDCOM ROX-based Devices NTP Vulnerabilities

OVERVIEW Siemens has reported to NCCIC/ICS-CERT that NTP daemon vulnerabilities exist in the Siemens RUGGEDCOM ROX-based devices. Siemens has produced firmware updates to mitigate these vulnerabilities. These vulnerabilities could be exploited remotely. AFFECTED PRODUCTS The following Siemens...

Siemens RuggedCom ROS和ROX设备信息泄露

No description provided by source...

Siemens RUGGEDCOM ROS IP转发漏洞

No description provided by source...

CVE-2015-6675

Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic...

Design/Logic Flaw

Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic...

CVE-2015-6675

The CVE-2015-6675 entry concerns Siemens RUGGEDCOM ROS where IP forwarding is permanently enabled in ROS 3.8.0 through 4.1.x, potentially allowing a remote attacker in one VLAN to bypass VLAN isolation and communicate with devices in another VLAN if IPs are configured across VLANs. Exploitation i...

CVE-2015-6675

Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic...

CVE-2015-6675: Improper Access Control

Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic...

PT-2015-7316

Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROS versions 3.8.0 through 4.1.x Description The issue allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic because the IP forwarding feature is permanently enabled. Recommendations For...

Siemens RUGGEDCOM ROS IP forwarding Vulnerability(CVE-2 0 1 5-6 6 7 5)-vulnerability warning-the black bar safety net

Affected system: Siemens RuggedCom ROS 3.8.0-4.2.0 Description: CVECAN ID: CVE-2 0 1 5-6 6 7 5 Siemens RuggedCom ROS and ROX devices used in harsh environments for equipment connections, such as substations, traffic management, chassis, etc. RUGGEDCOM ROS 3.8.0-4.2.0 version of the IP forwarding...

CVE-2015-5537

The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566...

Security feature bypass

The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566...

CVE-2015-5537

The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566...

CVE-2015-5537

Technical details about CVE-2015-5537 are not publicly provided in the supplied documents. No product/version/root-cause/impact/fix information is present here. Monitor for updates.

PT-2015-6980

Name of the Vulnerable Software and Affected Versions Siemens RuggedCom ROS versions prior to 4.2.0 Siemens RuggedCom ROX II affected versions not specified Description The SSL layer of the HTTPS service does not properly implement CBC padding, making it easier for man-in-the-middle attackers to...

CVE-2015-5537: Cleartext Storage of Sensitive Information

The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566...