Vulnerabilities > CVE-2014-1966 - Unspecified vulnerability in Siemens Ruggedcom Rugged Operating System

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
network
low complexity
siemens

Summary

The SNMP implementation in Siemens RuggedCom ROS before 3.11, ROS 3.11 for RS950G, ROS 3.12 before 3.12.4, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service (device outage) via crafted packets.

Seebug

bulletinFamilyexploit
descriptionCVE(CAN) ID: CVE-2014-1966 RuggedCom ROS产品是交换机和串行到以太网设备。 RuggedCom ROS设备 3.11之前版本的SNMP实现中存在安全漏洞,远程攻击者通过特制的数据包利用此漏洞可造成拒绝服务。 0 Siemens RuggedCom ROS-based < 3.11 厂商补丁: Siemens ------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.siemens.com/corporate-technology/pool/ http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf
idSSV:61563
last seen2017-11-19
modified2014-02-26
published2014-02-26
reporterRoot
titleSiemens RuggedCom资源耗尽漏洞