Skip to content
OpenAdvisories
Medium SSA-459643 1 CVE

SSA-459643: Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0

Published Sep 13, 2022 · Updated Apr 11, 2023 · Revision 3

Vendor: Siemens Product: RUGGEDCOM RMC8388 V5.X Product: RUGGEDCOM RMC8388NC V5.X Product: RUGGEDCOM RS416NC v2 Product: RUGGEDCOM RS416PNC v2 Product: RUGGEDCOM RS416Pv2 Product: RUGGEDCOM RS416v2 Product: RUGGEDCOM RS900 (32M) V5.X Product: RUGGEDCOM RS900G (32M) V5.X Product: RUGGEDCOM RS900GNC(32M) V5.X Product: RUGGEDCOM RS900NC(32M) V5.X Product: RUGGEDCOM RSG2100 (32M) V5.X Product: RUGGEDCOM RSG2100NC(32M) V5.X Product: RUGGEDCOM RSG2288 V5.X Product: RUGGEDCOM RSG2288NC V5.X Product: RUGGEDCOM RSG2300 V5.X Product: RUGGEDCOM RSG2300NC V5.X Product: RUGGEDCOM RSG2300P V5.X Product: RUGGEDCOM RSG2300PNC V5.X Product: RUGGEDCOM RSG2488 V5.X Product: RUGGEDCOM RSG2488NC V5.X Product: RUGGEDCOM RSG907R Product: RUGGEDCOM RSG908C Product: RUGGEDCOM RSG909R Product: RUGGEDCOM RSG910C Product: RUGGEDCOM RSG920P V5.X Product: RUGGEDCOM RSG920PNC V5.X Product: RUGGEDCOM RSL910 Product: RUGGEDCOM RSL910NC Product: RUGGEDCOM RST2228 +3 more

Summary

RUGGEDCOM ROS-based devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP connections.
The web server recovers by itself once the attack ends.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #3

    Added missing affected products with no fix planned

  2. #2

    Added mitigations and renamed products to highlight the affected version line V5

  3. #1

    Publication Date

References