SSA-594438 V1.0: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products

Risk Summary

<p>A vulnerability in the RUGGEDCOM ROX devices’ third party component, NSS, could allow an attacker to remotely execute code or cause a denial-of-service condition due to the way it verifies security certificates.</p> <p>Siemens has released updates for the affected products and recommends to update to the latest versions.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)