← Back to home
ICSA-19-099-05  ·  Published 2019-04-09  ·  View on CISA ICS-CERT ↗

ICSA-19-099-05 Siemens RUGGEDCOM ROX II

CVSS 9.8 CRITICAL

CVEs (3)

Remediations

  • Update to V2.13.0 - Download: The firmware updates for the RUGGEDCOM ROX-based devices can be obtained by contacting the RUGGEDCOM support team at: https://support.industry.siemens.com/my/WW/en/requests#createRequest
  • Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Disable the BGP routing service if not in use in your setup.
  • Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Configure BGP passwords to authenticate BGP neighbours.

Affected Vendors

Siemens

Affected Products (1)

Siemens · RUGGEDCOM ROX II <V2.13.0

Affected Sectors

Multiple

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more