Siemens RUGGEDCOM ROX I

Risk Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

CVEs (5)

Remediations

• Siemens recommends the following mitigations:
• https://support.industry.siemens.com/cs/ww/en/view/109746106
• The mitigation tool for the affected ROX I-based products can be obtained from Siemens by doing one of the following:
• https://www.siemens.com/automation/support-request
• https://w3.siemens.com/aspa_app/
• As a general security measure Siemens strongly recommends protecting network access to the web interface at Port 10000/TCP of ROX I-based devices with appropriate mechanisms and configuring the environment according to Siemens ' operational guidelines in order to run the devices in a protected IT environment:
• https://www.siemens.com/cert/operational-guidelines-industrial-security
• For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-327980 at the following location:
• http://www.siemens.com/cert/advisories/
• In addition, ICS-CERT recommends that users take the following measures to protect themselves from social engineering attacks:

Affected Vendors

Affected Products (1)

Affected Sectors

Energy, Healthcare, and Transportation