Vulnerability-Lookup

BDU:2024-05388 (CVE-2024-38278)

Vulnerability from fstec – Published: 2024-07-19 – Updated: 2024-07-19 – View on bdu.fstec.ru Fixed

Title

Уязвимость функции переадресации IP-пакетов IP-Forwarding микропрограммного обеспечения Ethernet-коммутаторов RUGGEDCOM, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Summary

Уязвимость функции переадресации IP-пакетов IP-Forwarding микропрограммного обеспечения Ethernet-коммутаторов RUGGEDCOM связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:N/AC:H/Au:M/C:C/I:C/A:C

6.6 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Authorization bypass

Incidents

Being clarified

Remediation

Software update

CWE

CWE-266 - Неправильное присваивание привилегий

Aliases

CVE-2024-38278, SSA-170375, ICSA-15-244-01

References

3 references

URL
https://cert-portal.siemens.com/productcert/html/ssa-170375.html
https://www.cisa.gov/news-events/ics-advisories/icsa-15-244-01
https://vuldb.com/?id.270664

Impacted products

32 products from 1 vendor

Vendors

Siemens AG

Products

RUGGEDCOM RMC8388, RUGGEDCOM RMC8388NC, RUGGEDCOM RS416NCv2, RUGGEDCOM RS416PNCv2, RUGGEDCOM RS900GNC(32M), RUGGEDCOM RS900NC(32M), RUGGEDCOM RSG2100NC(32M), RUGGEDCOM RSG2288NC, RUGGEDCOM RSG2300NC, RUGGEDCOM RSG2300PNC, RUGGEDCOM RSG2488NC, RUGGEDCOM RSG920PNC, RUGGEDCOM RSL910NC, RUGGEDCOM RST916P, RUGGEDCOM RST916C, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RSL910, RUGGEDCOM RSG910C, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RS416Pv2, RUGGEDCOM RSG2488, RUGGEDCOM RSG2300P, RUGGEDCOM RSG920P, RUGGEDCOM RSG2300, RUGGEDCOM RSG2288, RUGGEDCOM RSG2100 (32M), RUGGEDCOM RS900G (32M), RUGGEDCOM RS900 (32M), RUGGEDCOM RS416v2

Versions

от 5.0.0 до 5.9.0 (RUGGEDCOM RMC8388), от 5.0.0 до 5.9.0 (RUGGEDCOM RMC8388NC), от 5.0.0 до 5.9.0 (RUGGEDCOM RS416NCv2), от 5.0.0 до 5.9.0 (RUGGEDCOM RS416PNCv2), от 5.0.0 до 5.9.0 (RUGGEDCOM RS900GNC(32M)), от 5.0.0 до 5.9.0 (RUGGEDCOM RS900NC(32M)), от 5.0.0 до 5.9.0 (RUGGEDCOM RSG2100NC(32M)), от 5.0.0 до 5.9.0 (RUGGEDCOM RSG2288NC), от 5.0.0 до 5.9.0 (RUGGEDCOM RSG2300NC), от 5.0.0 до 5.9.0 (RUGGEDCOM RSG2300PNC), от 5.0.0 до 5.9.0 (RUGGEDCOM RSG2488NC), от 5.0.0 до 5.9.0 (RUGGEDCOM RSG920PNC), до 5.9.0 (RUGGEDCOM RSL910NC), до 5.9.0 (RUGGEDCOM RST916P), до 5.9.0 (RUGGEDCOM RST916C), до 5.9.0 (RUGGEDCOM RST2228), до 5.9.0 (RUGGEDCOM RST2228P), до 5.9.0 (RUGGEDCOM RSL910), до 5.9.0 (RUGGEDCOM RSG910C), до 5.9.0 (RUGGEDCOM RSG907R), до 5.9.0 (RUGGEDCOM RSG908C), до 5.9.0 (RUGGEDCOM RSG909R), от 5.0.0 до 5.9.0 (RUGGEDCOM RS416Pv2), от 5.0.0 до 5.9.0 (RUGGEDCOM RSG2488), от 5.0.0 до 5.9.0 (RUGGEDCOM RSG2300P), от 5.0.0 до 5.9.0 (RUGGEDCOM RSG920P), от 5.0.0 до 5.9.0 (RUGGEDCOM RSG2300), от 5.0.0 до 5.9.0 (RUGGEDCOM RSG2288), от 5.0.0 до 5.9.0 (RUGGEDCOM RSG2100 (32M)), от 5.0.0 до 5.9.0 (RUGGEDCOM RS900G (32M)), от 5.0.0 до 5.9.0 (RUGGEDCOM RS900 (32M)), от 5.0.0 до 5.9.0 (RUGGEDCOM RS416v2)

Product types

Network device, Network software, Network appliance software

Mitigations

Использование рекомендаций: https://cert-portal.siemens.com/productcert/html/ssa-170375.html Компенсирующие меры: В случае невозможности установки обновлений рекомендуется отключить функцию переадресации IP-пакетов IP-Forwarding, если она не требуется (обратите внимание, что функция IP-Forwarding по умолчанию отключена).

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:H/Au:M/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Siemens AG",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RMC8388), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RMC8388NC), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RS416NCv2), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RS416PNCv2), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RS900GNC(32M)), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RS900NC(32M)), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RSG2100NC(32M)), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RSG2288NC), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RSG2300NC), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RSG2300PNC), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RSG2488NC), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RSG920PNC), \u0434\u043e 5.9.0 (RUGGEDCOM RSL910NC), \u0434\u043e 5.9.0 (RUGGEDCOM RST916P), \u0434\u043e 5.9.0 (RUGGEDCOM RST916C), \u0434\u043e 5.9.0 (RUGGEDCOM RST2228), \u0434\u043e 5.9.0 (RUGGEDCOM RST2228P), \u0434\u043e 5.9.0 (RUGGEDCOM RSL910), \u0434\u043e 5.9.0 (RUGGEDCOM RSG910C), \u0434\u043e 5.9.0 (RUGGEDCOM RSG907R), \u0434\u043e 5.9.0 (RUGGEDCOM RSG908C), \u0434\u043e 5.9.0 (RUGGEDCOM RSG909R), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RS416Pv2), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RSG2488), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RSG2300P), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RSG920P), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RSG2300), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RSG2288), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RSG2100 (32M)), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RS900G (32M)), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RS900 (32M)), \u043e\u0442 5.0.0 \u0434\u043e 5.9.0 (RUGGEDCOM RS416v2)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://cert-portal.siemens.com/productcert/html/ssa-170375.html\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u0438 IP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 IP-Forwarding, \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f (\u043e\u0431\u0440\u0430\u0442\u0438\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f IP-Forwarding \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430).",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "12.06.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "19.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "19.07.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-05388",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-38278, SSA-170375, ICSA-15-244-01",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "RUGGEDCOM RMC8388, RUGGEDCOM RMC8388NC, RUGGEDCOM RS416NCv2, RUGGEDCOM RS416PNCv2, RUGGEDCOM RS900GNC(32M), RUGGEDCOM RS900NC(32M), RUGGEDCOM RSG2100NC(32M), RUGGEDCOM RSG2288NC, RUGGEDCOM RSG2300NC, RUGGEDCOM RSG2300PNC, RUGGEDCOM RSG2488NC, RUGGEDCOM RSG920PNC, RUGGEDCOM RSL910NC, RUGGEDCOM RST916P, RUGGEDCOM RST916C, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RSL910, RUGGEDCOM RSG910C, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RS416Pv2, RUGGEDCOM RSG2488, RUGGEDCOM RSG2300P, RUGGEDCOM RSG920P, RUGGEDCOM RSG2300, RUGGEDCOM RSG2288, RUGGEDCOM RSG2100 (32M), RUGGEDCOM RS900G (32M), RUGGEDCOM RS900 (32M), RUGGEDCOM RS416v2",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u0438 IP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 IP-Forwarding \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Ethernet-\u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 RUGGEDCOM, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0438\u0441\u0432\u0430\u0438\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (CWE-266)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u0438 IP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 IP-Forwarding \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Ethernet-\u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 RUGGEDCOM \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://cert-portal.siemens.com/productcert/html/ssa-170375.html\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-15-244-01\nhttps://vuldb.com/?id.270664",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-266",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,6)"
}

CVE-2024-38278 (GCVE-0-2024-38278)

Vulnerability from cvelistv5 – Published: 2024-07-09 12:05 – Updated: 2025-08-27 20:42

Summary

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.9.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.9.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.9.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2288 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2288NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300P V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300PNC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2488 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2488NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG907R (All versions < V5.9.0), RUGGEDCOM RSG908C (All versions < V5.9.0), RUGGEDCOM RSG909R (All versions < V5.9.0), RUGGEDCOM RSG910C (All versions < V5.9.0), RUGGEDCOM RSG920P V5.X (All versions < V5.9.0), RUGGEDCOM RSG920PNC V5.X (All versions < V5.9.0), RUGGEDCOM RSL910 (All versions < V5.9.0), RUGGEDCOM RSL910NC (All versions < V5.9.0), RUGGEDCOM RST2228 (All versions < V5.9.0), RUGGEDCOM RST2228P (All versions < V5.9.0), RUGGEDCOM RST916C (All versions < V5.9.0), RUGGEDCOM RST916P (All versions < V5.9.0). The affected products with IP forwarding enabled wrongly make available certain remote services in non-managed VLANs, even if these services are not intentionally activated. An attacker could leverage this vulnerability to create a remote shell to the affected system.

Severity

6.6 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

7.5 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-07-24 17:16 UTC

CWE

CWE-266 - Incorrect Privilege Assignment

Assigner

siemens icscert root

References

1 reference

URL	Tags
https://cert-portal.siemens.com/productcert/html/…

Impacted products

66 products

Vendor	Product	Version
Siemens	RUGGEDCOM RMC8388 V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RMC8388NC V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RS416NCv2 V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RS416PNCv2 V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RS416Pv2 V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RS416v2 V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RS900 (32M) V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RS900G (32M) V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RS900GNC(32M) V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RS900NC(32M) V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG2100 (32M) V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG2100NC(32M) V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG2100P (32M) V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG2100PNC (32M) V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG2288 V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG2288NC V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG2300 V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG2300NC V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG2300P V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG2300PNC V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG2488 V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG2488NC V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG907R	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG908C	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG909R	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG910C	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG920P V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSG920PNC V5.X	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSL910	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RSL910NC	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RST2228	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RST2228P	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RST916C	Affected: 0 , < V5.9.0 (custom)
Siemens	RUGGEDCOM RST916P	Affected: 0 , < V5.9.0 (custom)
siemens	ruggedcom_ros_rmc8388	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rmc8388::::::::
siemens	ruggedcom_ros_rmc8388nc	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rmc8388nc::::::::
siemens	ruggedcom_ros_rs416ncv2	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rs416ncv2::::::::
siemens	ruggedcom_ros_rs416pncv2	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rs416pncv2::::::::
siemens	ruggedcom_ros_rs416pv2	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rs416pv2::::::::
siemens	ruggedcom_ros_rs416v2	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rs416v2::::::::
siemens	ruggedcom_ros_rs900	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rs900::::::::
siemens	ruggedcom_ros_rs900g	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rs900g::::::::
siemens	ruggedcom_ros_rs900gnc	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rs900gnc::::::::
siemens	ruggedcom_ros_rs900nc	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rs900nc::::::::
siemens	ruggedcom_ros_rsg2100	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg2100::::::::
siemens	ruggedcom_ros_rsg2100nc	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg2100nc::::::::
siemens	ruggedcom_ros_rsg2288	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg2288::::::::
siemens	ruggedcom_ros_rsg2288nc	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg2288nc::::::::
siemens	ruggedcom_ros_rsg2300	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg2300::::::::
siemens	ruggedcom_ros_rsg2300nc	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg2300nc::::::::
siemens	ruggedcom_ros_rsg2300p	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg2300p::::::::
siemens	ruggedcom_ros_rsg2300pnc	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg2300pnc::::::::
siemens	ruggedcom_ros_rsg2488	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg2488::::::::
siemens	ruggedcom_ros_rsg2488nc	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg2488nc::::::::
siemens	ruggedcom_ros_rsg907r	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg907r::::::::
siemens	ruggedcom_ros_rsg908c	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg908c::::::::
siemens	ruggedcom_ros_rsg909r	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg909r::::::::
siemens	ruggedcom_ros_rsg910c	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg910c::::::::
siemens	ruggedcom_ros_rsg920p	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg920p::::::::
siemens	ruggedcom_ros_rsg920pnc	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsg920pnc::::::::
siemens	ruggedcom_ros_rsl910	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsl910::::::::
siemens	ruggedcom_ros_rsl910nc	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rsl910nc::::::::
siemens	ruggedcom_ros_rst2228	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rst2228::::::::
siemens	ruggedcom_ros_rst2228p	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rst2228p::::::::
siemens	ruggedcom_ros_rst916c	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rst916c::::::::
siemens	ruggedcom_ros_rst916p	Affected: 0 , < 5.9.0 (custom) cpe:2.3:o:siemens:ruggedcom_ros_rst916p::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rmc8388:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rmc8388",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rmc8388nc:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rmc8388nc",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rs416ncv2:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rs416ncv2",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rs416pncv2:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rs416pncv2",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rs416pv2:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rs416pv2",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rs416v2:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rs416v2",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rs900:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rs900",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rs900g:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rs900g",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rs900gnc:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rs900gnc",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rs900nc:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rs900nc",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg2100:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg2100",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg2100nc:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg2100nc",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg2288:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg2288",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg2288nc:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg2288nc",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg2300:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg2300",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg2300nc:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg2300nc",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg2300p:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg2300p",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg2300pnc:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg2300pnc",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg2488:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg2488",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg2488nc:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg2488nc",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg907r:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg907r",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg908c:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg908c",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg909r:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg909r",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg910c:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg910c",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg920p:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg920p",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsg920pnc:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsg920pnc",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsl910:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsl910",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rsl910nc:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rsl910nc",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rst2228:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rst2228",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rst2228p:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rst2228p",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rst916c:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rst916c",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:ruggedcom_ros_rst916p:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ruggedcom_ros_rst916p",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "5.9.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-38278",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-24T17:16:47.980613Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-27T20:42:54.768Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T04:04:25.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-170375.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RMC8388 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RMC8388NC V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS416NCv2 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS416PNCv2 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS416Pv2 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS416v2 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS900 (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS900G (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS900GNC(32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS900NC(32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2100 (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2100NC(32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2100P (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2100PNC (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2288 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2288NC V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2300 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2300NC V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2300P V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2300PNC V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2488 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2488NC V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG907R",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG908C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG909R",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG910C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG920P V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG920PNC V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSL910",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSL910NC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RST2228",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RST2228P",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RST916C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RST916P",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions \u003c V5.9.0), RUGGEDCOM RMC8388NC V5.X (All versions \u003c V5.9.0), RUGGEDCOM RS416NCv2 V5.X (All versions \u003c V5.9.0), RUGGEDCOM RS416PNCv2 V5.X (All versions \u003c V5.9.0), RUGGEDCOM RS416Pv2 V5.X (All versions \u003c V5.9.0), RUGGEDCOM RS416v2 V5.X (All versions \u003c V5.9.0), RUGGEDCOM RS900 (32M) V5.X (All versions \u003c V5.9.0), RUGGEDCOM RS900G (32M) V5.X (All versions \u003c V5.9.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions \u003c V5.9.0), RUGGEDCOM RS900NC(32M) V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG2288 V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG2288NC V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG2300 V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG2300NC V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG2300P V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG2300PNC V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG2488 V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG2488NC V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG907R (All versions \u003c V5.9.0), RUGGEDCOM RSG908C (All versions \u003c V5.9.0), RUGGEDCOM RSG909R (All versions \u003c V5.9.0), RUGGEDCOM RSG910C (All versions \u003c V5.9.0), RUGGEDCOM RSG920P V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSG920PNC V5.X (All versions \u003c V5.9.0), RUGGEDCOM RSL910 (All versions \u003c V5.9.0), RUGGEDCOM RSL910NC (All versions \u003c V5.9.0), RUGGEDCOM RST2228 (All versions \u003c V5.9.0), RUGGEDCOM RST2228P (All versions \u003c V5.9.0), RUGGEDCOM RST916C (All versions \u003c V5.9.0), RUGGEDCOM RST916P (All versions \u003c V5.9.0). The affected products with IP forwarding enabled wrongly make available certain remote services in non-managed VLANs, even if these services are not intentionally activated. An attacker could leverage this vulnerability to create a remote shell to the affected system."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "CWE-266: Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-12T11:16:32.146Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-170375.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2024-38278",
    "datePublished": "2024-07-09T12:05:07.958Z",
    "dateReserved": "2024-06-12T14:37:01.983Z",
    "dateUpdated": "2025-08-27T20:42:54.768Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

ICSA-15-244-01

Vulnerability from csaf_cisa - Published: 2015-06-04 06:00 - Updated: 2025-06-06 16:10

Summary

Siemens RUGGEDCOM ROS IP Forwarding Vulnerability

Scope

1 vulnerability in this advisory.

Open the full advisory

SSA-170375

Vulnerability from csaf_siemens - Published: 2024-07-09 00:00 - Updated: 2025-08-12 00:00

Summary

SSA-170375: Multiple Vulnerabilities in RUGGEDCOM ROS Before V5.9

Scope

4 vulnerabilities in this advisory.

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2024-05388 (CVE-2024-38278)

CVE-2024-38278 (GCVE-0-2024-38278)

ICSA-15-244-01

SSA-170375

Tags

Sightings

Nomenclature

Related by attack behaviour