Vulnerability CVE-2015-6675


Published: 2015-09-11

Description:
Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic.

CVSS2 => (AV:A/AC:M/Au:N/C:P/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.3/10
4.9/10
5.5/10
Exploit range
Attack complexity
Authentication
Adjacent network
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
None
Affected software
Siemens -> Ruggedcom rugged operating system 

 References:
http://www.securitytracker.com/id/1033478
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-720081.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-15-244-01

Copyright 2024, cxsecurity.com

 

Back to Top