Remote Shell Vulnerability in Siemens RUGGEDCOM Products
CVE-2024-38278

6.6MEDIUM

Key Information:

Vendor
Siemens
Status
Ruggedcom Rmc8388 V5.x
Ruggedcom Rmc8388nc V5.x
Ruggedcom Rs416ncv2 V5.x
Ruggedcom Rs416pncv2 V5.x
Vendor
CVE Published:
9 July 2024

Summary

A significant vulnerability exists in multiple Siemens RUGGEDCOM devices where improper handling of IP forwarding settings exposes specific remote services in non-managed VLANs. This allows unauthorized access and enables potential attackers to create a remote shell, compromising the security integrity of the affected systems. Users are advised to update their devices to version 5.9.0 or later to mitigate this risk.

Affected Version(s)

RUGGEDCOM RMC8388 V5.X 0

RUGGEDCOM RMC8388NC V5.X 0

RUGGEDCOM RS416NCv2 V5.X 0

References

https://cert-portal.siemens.com/productcert/html/ssa-1703...

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.