CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

287 matches found

ICS•added 2024/12/10 12:00 a.m.•9 views

Siemens RUGGEDCOM ROX II

SUMMARY The CLI feature in the web interface of RUGGEDCOM ROX II devices is vulnerable to cross-site request forgery CSRF, which could allow an attacker to perform administrative actions if an authenticated user is tricked into accessing a malicious link. Siemens has released new versions for...

8.8CVSS6.9AI score0.00204EPSS

SaveExploits0References10

BDU FSTEC•added 2023/10/10 12:00 a.m.•13 views

The vulnerability of microprogramming software in routing and switching platforms such as RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 arises from the use of weak encryption algorithms. This allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of microprogramming software in routing and switching platforms such as RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 is related to the use of weak encryption algorithms. Exploiting this vulnerability can allow a remote attacker to carry out a...

5.9CVSS7AI score0.00243EPSS

SaveExploits0References2Affected Software11

Tenable Nessus•added 2023/09/14 12:00 a.m.•22 views

Siemens RUGGEDCOM ROX Cross-Site Request Forgery (CVE-2022-29561)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

8.8CVSS8.1AI score0.00276EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•26 views

Siemens RUGGEDCOM ROX II Improper Certificate Validation (CVE-2019-17007)

In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

7.5CVSS6.8AI score0.01399EPSS

SaveExploits1References5

Tenable Nessus•added 2023/09/14 12:00 a.m.•16 views

Siemens RUGGEDCOM ROX Improper Input Validation (CVE-2022-29562)

5.3CVSS6.7AI score0.00748EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•15 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36754)

9.1CVSS7.9AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•21 views

Siemens RUGGEDCOM ROX Improper Privilege Management (CVE-2021-37173)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.14.1, RUGGEDCOM ROX RX1400 All versions V2.14.1, RUGGEDCOM ROX RX1500 All versions V2.14.1, RUGGEDCOM ROX RX1501 All versions V2.14.1, RUGGEDCOM ROX RX1510 All versions V2.14.1, RUGGEDCOM ROX RX1511 All versions V2.14.1,...

9CVSS7.5AI score0.01606EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•26 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36752)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•21 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36755)

9.1CVSS8.1AI score0.00972EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•17 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2022-29560)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions 2.15.1, RUGGEDCOM ROX MX5000RE All versions 2.15.1, RUGGEDCOM ROX RX1400 All versions 2.15.1, RUGGEDCOM ROX RX1500 All versions 2.15.1, RUGGEDCOM ROX RX1501 All versions 2.15.1, RUGGEDCOM ROX RX1510 All versions 2.15.1,...

10CVSS7AI score0.01606EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•25 views

Siemens RUGGEDCOM ROX Improper Neutralization of Input During Web Page Generation (CVE-2023-36389)

8.8CVSS6.7AI score0.00442EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•26 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36750)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•17 views

Siemens RUGGEDCOM ROX Improper Neutralization of Input During Web Page Generation (CVE-2023-36390)

8.8CVSS6.8AI score0.00442EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•18 views

Siemens RUGGEDCOM ROX Improper Handling of Insufficient Permissions or Privileges (CVE-2021-37175)

5.3CVSS6.2AI score0.00752EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•37 views

Siemens RUGGEDCOM ROX Out-of-bounds Write (CVE-2019-11745)

When encrypting with a block cipher, if a call to NSCEncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 68.3, Firefox ESR 68.3, an...

8.8CVSS6.5AI score0.02994EPSS

SaveExploits0References18

Tenable Nessus•added 2023/09/14 12:00 a.m.•22 views

Siemens RUGGEDCOM ROX Improper Neutralization of Input During Web Page Generation (CVE-2023-36386)

8.8CVSS6.8AI score0.00442EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•30 views

Siemens RUGGEDCOM ROX II Insufficient Verification of Data Authenticity (CVE-2019-17006)

In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow. This plugin only works with Tenable.ot...

10CVSS6.9AI score0.03596EPSS

SaveExploits1References6

BDU FSTEC•added 2023/08/03 12:00 a.m.•19 views

The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the web interface of microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 stems from the lack of measures to neutralize special elements used in the operating system’s processing of the...

9.1CVSS7.6AI score0.01535EPSS

SaveExploits0References3Affected Software11

BDU FSTEC•added 2023/08/03 12:00 a.m.•21 views

The vulnerability of the web interface of microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 lies in the lack of measures to neutralize special elements during the processing of URL parameters when connecting to the...

9.1CVSS7.6AI score0.01535EPSS

SaveExploits0References4Affected Software11

BDU FSTEC•added 2023/08/02 12:00 a.m.•18 views

The vulnerability of the web interface of microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 lies in the lack of measures to neutralize special elements used in the operating system’s command for handling the...

9.1CVSS7.6AI score0.01535EPSS

SaveExploits0References3Affected Software11

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by