Remote Shell Vulnerability in Siemens RUGGEDCOM Products
CVE-2024-38278
7.5HIGH
Key Information:
- Vendor
- Siemens
- Status
- Vendor
- CVE Published:
- 9 July 2024
Summary
A significant vulnerability exists in multiple Siemens RUGGEDCOM devices where improper handling of IP forwarding settings exposes specific remote services in non-managed VLANs. This allows unauthorized access and enables potential attackers to create a remote shell, compromising the security integrity of the affected systems. Users are advised to update their devices to version 5.9.0 or later to mitigate this risk.
Affected Version(s)
RUGGEDCOM RMC8388 V5.X 0
RUGGEDCOM RMC8388NC V5.X 0
RUGGEDCOM RS416NCv2 V5.X 0
References
CVSS V4
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published