Summary
The boot loader within RUGGEDCOM ROS contains two vulnerabilities in the loading process of the operating system kernel. The more severe of these vulnerabilities could allow an attacker with local access to the device to execute arbitrary code on an affected device.
Siemens recommends specific countermeasures to mitigate this issue.
Vulnerabilities 2
-
Unscored —
DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem…
-
Unscored —
A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely rec…
Revision history
-
#3
Removed RUGGEDCOM RSG900C and RSG900R as all products from these families are also listed in the advisory (RUGGEDCOM RSG907R, RSG908C, RSG909R and RSG910C). Readjusted product naming to reflect firmware version used (V4.X or/and V5.X). Added missing products: RUGGEDCOM RMC8388NC, RSG2488NC, RSG920PNC, RST2228P, RST916C and RST916P
-
#2
Only devices shipped with U-Boot < V2016.05RS09 are affected by CVE-2018-18440, clarify that currently no fix is planned for affected devices
-
#1
Publication Date
References
-
SSA-618620: Vulnerabilities in Boot Loader (U-Boot) of RUGGEDCOM ROS Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-618620.html
-
SSA-618620: Vulnerabilities in Boot Loader (U-Boot) of RUGGEDCOM ROS Devices - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-618620.pdf
-
SSA-618620: Vulnerabilities in Boot Loader (U-Boot) of RUGGEDCOM ROS Devices - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-618620.txt