Security Flaw in RuggedCom Products by Siemens

CVE-2023-52237

Summary

A significant vulnerability has been detected in various RuggedCom products manufactured by Siemens. The affected devices' web servers permit low privileged users to access critical data, specifically the password hashes and salts of all registered system users, including those with administrative privileges. An attacker who exploits this flaw could potentially utilize the exposed information to perform offline brute force attacks on user passwords, thereby compromising the security of the devices and the networks they operate within. It is essential for users of these devices to take immediate action to mitigate the risks associated with this vulnerability.

References