CVE-2014-1966

The SNMP implementation in Siemens RuggedCom ROS before 3.11, ROS 3.11 for RS950G, ROS 3.12 before 3.12.4, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service device outage via crafted packets...

Siemens RuggedCom ROX-based Devices Certificate Verification Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-14-135-03 Siemens RuggedCom ROX-Based Devices Certificate Verification Vulnerability that was published May 15, 2014, on the NCCIC/ICS-CERT web site. Siemens has reported to ICS-CERT an incorrect certificate...

Siemens Ruggedcom WIN Products BEAST Attack Vulnerability

OVERVIEW Siemens has identified a BEAST Browser Exploit Against SSL/TLS attack vulnerability in Siemens Ruggedcom WIN products. This vulnerability was originally reported directly to Siemens ProductCERT by Dan Frein and Paul Cotter of West Monroe Partners. Siemens has produced a firmware update...

CVE-2013-6926

The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended restrictions on administrative actions by leveraging access to a 1 guest or 2 operator account...

CVE-2013-6925

The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value...

Design/Logic Flaw

The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value...

Design/Logic Flaw

The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended restrictions on administrative actions by leveraging access to a 1 guest or 2 operator account...

CVE-2013-6925

CVE-2013-6925 affects Siemens RuggedCom ROS prior to version 3.12.2, where the integrated HTTPS Web server on Port 443 could allow remote attackers to hijack active Web sessions by predicting a session ID value. Root cause is use of insufficiently random values (CWE-330), enabling session predict...

CVE-2013-6925

The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value...

CVE-2013-6926

The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended restrictions on administrative actions by leveraging access to a 1 guest or 2 operator account...

CVE-2013-6926

The CVE concerns Siemens RuggedCom ROS prior to v3.12.2, where the integrated HTTPS server on port 443/TCP could allow remote authenticated attackers to bypass restrictions and perform limited administrative actions by using a guest or operator account. The vulnerability stems from an authenticat...

RuggedCom Rugged Operating System < 3.12.2 Multiple Security Vulnerabilities

Binary data 8027.prm...

RuggedCom Rugged Operating System Remote Security Bypass Vulnerability

Rugged Operating System is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

RuggedCom RuggedOS < 3.12.2 Multiple Vulnerabilities

Binary data scadaruggedoshttp3122.nbin...

RuggedCom ROS Multiple Vulnerabilities

OVERVIEW Siemens has reported to NCCIC/ICS-CERT multiple vulnerabilities in the RuggedCom Rugged OS ROS. Siemens has produced a firmware update that mitigates these vulnerabilities. Exploitation of these vulnerabilities could allow an attacker to hijack an active Web session and access...

RuggedCom Server Version Detection

Binary data 6888.prm...

RuggedCom Rugged Operating System < 3.12.4 (or 4.0 for RSG2488) Remote Denial of Service via SNMP

Binary data 8127.prm...

RuggedCom Rugged Operating System < 4.1 (or 3.11.5 for RS950G) Remote Denial of Service

Binary data 8180.prm...

RuggedCom RuggedOS < 3.12.1 Web UI Multiple Security Vulnerabilities

Binary data scadaruggedoshttp3121.nbin...

Detection of Rugged Operating System

Detection of Rugged Operating System. The script sends a connection request to the server and attempts to extract the version number from the reply. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a...