Siemens RUGGEDCOM ROX II

Vulnerabilities 6

• High 7.5
  CVE-2020-1763

  An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an una…

  The Libreswan Project libreswan libreswan libreswan Debian Ubuntu Alpine
  May 12, 2020
• Unscored —
  CVE-2018-12404 EPSS 44%

  A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content…

  Mozilla Network Security Services (NSS) nss nss Debian Ubuntu Alpine
  May 2, 2019
• Unscored —
  CVE-2018-18508

  In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a nu…

  Mozilla NSS nss nss Debian Ubuntu
  Oct 22, 2020
• Unscored —
  CVE-2019-11745

  When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a s…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jan 8, 2020
• Unscored —
  CVE-2019-17006

  In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases wh…

  Mozilla NSS nss nss Debian Ubuntu
  Oct 22, 2020
• Unscored —
  CVE-2019-17007

  In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting i…

  Mozilla NSS nss nss Debian Ubuntu
  Oct 22, 2020

Revision history

1. 2021-02-09 #1

   Publication Date

References

• SSA-379803: Vulnerabilities in RUGGEDCOM ROX II - HTML Version
  https://cert-portal.siemens.com/productcert/html/ssa-379803.html
• ICS Advisory ICSA-21-040-04 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-21-040-04
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B