SSA-189842 (Last Update: 2019-12-10): TCP URGENT/11 Vulnerabilities in RUGGEDCOM Win

Risk Summary

<p>RUGGEDCOM Win is affected by multiple security vulnerabilities. These vulnerabilities could allow an attacker to leverage various attacks, e.g. to execute arbitrary code over the network.</p> <p>The vulnerabilities affect the underlying Wind River VxWorks network stack and were recently patched by Wind River.</p> <p>Siemens is working on updates for the affected products, and recommends specific countermeasures until fixes are available.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)