Remote Code Execution Risk in RUGGEDCOM ROS by Siemens

CVE-2021-31895

What is CVE-2021-31895?

A significant vulnerability has been found in multiple versions of Siemens RUGGEDCOM ROS. Specifically, the DHCP client within these devices inadequately sanitizes incoming DHCP packets. This weakness allows malicious actors to craft malicious DHCP packets that, when processed by the affected devices, can lead to memory corruption. The exploit could potentially enable unauthorized remote code execution, compromising the security and integrity of the affected network devices.

References