Authentication flaw

The integrated management service on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allows remote attackers to bypa...

CVE-2015-1448

The CVE refers to Siemens Ruggedcom WIN51xx/ WIN52xx/ WIN70xx/ WIN72xx devices where the integrated management service could be exploited remotely to bypass authentication and perform administrative actions. Affected firmware versions before SS4.4.4624.35 (WIN51xx/ WIN52xx) and before BS4.4.4621....

CVE-2015-1357

Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allow context-dependent attackers to discover password hashes by...

CVE-2015-1448

The integrated management service on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allows remote attackers to bypa...

CVE-2015-1449

CVE-2015-1449 affects Siemens Ruggedcom WIN51xx/WIN52xx/WIN70xx/WIN72xx, where the integrated web server is vulnerable to a stack-based buffer overflow that can allow remote code execution. The vulnerable firmware lines are before SS4.4.4624.35 for WIN51xx/WIN52xx and before BS4.4.4621.32 for WIN...

CVE-2015-1449

Buffer overflow in the integrated web server on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allows remote...

CVE-2015-1357

Siemens Ruggedcom WIN51xx/WIN52xx with firmware < SS4.4.4624.35 and WIN70xx/WIN72xx with firmware

CVE-2015-1357: Exposure of Sensitive Information to an Unauthorized Actor

Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allow context-dependent attackers to discover password hashes by...

CVE-2015-1448: Undefined Security Weakness

The integrated management service on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allows remote attackers to bypa...

CVE-2015-1449: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the integrated web server on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allows remote...

Siemens ROS Improper Input Validation (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-14-087-01 Siemens ROS Improper Input Validation that was published March 28, 2014, on the NCCIC/ICS-CERT web site. Researcher Aivar Liimets from Martem Telecontrol Systems reported an improper input validation...

Siemens RuggedCom Uncontrolled Resource Consumption Vulnerability (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-14-051-03A Siemens RuggedCom Uncontrolled Resource Consumption Vulnerability that was published March 18, 2014, on the NCCIC/ICS-CERT web site. Researchers Ling Toh Koh, Ng Yi Teng, Seyed Dawood Sajjadi Torshizi, Ry...

RuggedCom Devices Backdoor Access

No description provided by source...

RuggedCom RuggedOS SNMP Protocol Unspecified DoS

Binary data scadaruggedoscve20141966.nbin...

RuggedCom RuggedOS HTTP Traffic Handling Remote DoS

Binary data scadaruggedoshttp41.nbin...

Siemens Ruggedcom Addresses BEAST Flaw in WiMax Products

The BEAST attack on some TLS implementations made major news when it was disclosed, showing that attackers could intercept and decrypt SSL-protected sessions in real time, breaking a significant portion of the confidentiality model of the protocol. Vendors rushed to patch and implement mitigation...

CVE-2014-2590

The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service interface outage via crafted HTTP packets...

Design/Logic Flaw

The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service interface outage via crafted HTTP packets...

RuggedCom Rugged Operating System WEB接口拒绝服务漏洞

Bugtraq ID:66522 CVE ID:CVE-2014-2590 RuggedCom Inc罗杰康公司是世界领先的生产用于工业环境的高性能网络和通信设备的制造商。 RuggedCom Rugged Operating System系统中监听80端口的WEB服务器不正确处理用户提交的特制报文，允许攻击者提交特制的请求使WEB接口崩溃，此漏洞不影响HTTPS服务及交换功能。 0 RuggedCom Rugged Operating System v3.11 RuggedCom Rugged Operating System v3.11 for RS950G RuggedCom...

CVE-2014-2590

The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service interface outage via crafted HTTP packets...