Remote Shell Vulnerability in Siemens RUGGEDCOM Products
CVE-2024-38278
7.5HIGH
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 9 July 2024
What is CVE-2024-38278?
A significant vulnerability exists in multiple Siemens RUGGEDCOM devices where improper handling of IP forwarding settings exposes specific remote services in non-managed VLANs. This allows unauthorized access and enables potential attackers to create a remote shell, compromising the security integrity of the affected systems. Users are advised to update their devices to version 5.9.0 or later to mitigate this risk.
Affected Version(s)
RUGGEDCOM RMC8388 V5.X 0
RUGGEDCOM RMC8388NC V5.X 0
RUGGEDCOM RS416NCv2 V5.X 0