Summary
A vulnerability in the RUGGEDCOM ROX devices' third party component, NSS, could allow an attacker to remotely execute code or cause a denial-of-service condition due to the way it verifies security certificates.
Siemens has released updates for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
Unscored —CVE-2021-43527 EPSS 18%
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DE…
Revision history
-
#1
Publication Date
References
-
SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-594438.pdf
-
SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-594438.txt