First published: Mon Feb 24 2014(Updated: )
The SNMP implementation in Siemens RuggedCom ROS before 3.11, ROS 3.11 for RS950G, ROS 3.12 before 3.12.4, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service (device outage) via crafted packets.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Siemens RuggedCom Rugged operating system | <3.11.0 | |
Siemens RuggedCom Rugged operating system | >=3.12<3.12.4 | |
Siemens RuggedCom Rugged operating system | >3.11.0<3.11.5 | |
Siemens RuggedCom RS950G | ||
Siemens RuggedCom Rugged operating system | >4.0<4.1.0 | |
Siemens RUGGEDCOM ROS RSG2488 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-1966 has a high severity rating due to its potential to cause denial of service and device outages.
To fix CVE-2014-1966, upgrade the Siemens RuggedCom ROS to version 3.12.4 or later, or version 4.1.0 or later.
CVE-2014-1966 affects Siemens RuggedCom ROS versions earlier than 3.11, 3.12 before 3.12.4, and 4.0 before 4.1.0.
Yes, CVE-2014-1966 can be exploited remotely through crafted SNMP packets.
The impact of CVE-2014-1966 includes causing device outages and potentially disrupting network services.