CVE-2014-2590: Medium severity Siemens Ruggedcom Rugged Operating System vulnerability
Published Mar 28, 2014
·Updated
The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service (interface outage) via crafted HTTP packets.
Affected Software
10 affected components
Siemens Ruggedcom Rugged Operating System<3.11.0
Siemens Ruggedcom Rugged Operating System>=3.12<3.12.4
All of the following
Siemens Ruggedcom Rugged Operating System>3.11.0<3.11.5
Siemens Ruggedcom Rs950g
All of the following
Siemens Ruggedcom Rugged Operating System>4.0<4.1.0
Siemens Ruggedcom Rsg2488
Siemens Ruggedcom Rugged Operating System>3.11.0<3.11.5
Siemens Ruggedcom Rs950g
Siemens Ruggedcom Rugged Operating System>4.0<4.1.0
Siemens Ruggedcom Rsg2488
Event History
Mar 28, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Apr 1, 2014
Data Sourced
via NVD·06:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2590?
CVE-2014-2590 is classified as a denial of service vulnerability that can lead to interface outages.
2
How do I fix CVE-2014-2590?
To mitigate CVE-2014-2590, upgrade the Siemens RuggedCom ROS to version 3.11.5 or later, or version 4.1.0 or above.
3
What products are affected by CVE-2014-2590?
CVE-2014-2590 affects Siemens RuggedCom ROS versions prior to 3.11.5 and between 3.12.0 and 3.12.4.
4
Can CVE-2014-2590 be exploited remotely?
Yes, CVE-2014-2590 can be exploited remotely by sending crafted HTTP packets.
5
Is there a specific update for CVE-2014-2590?
Yes, users should apply updates from Siemens that address this specific vulnerability in affected versions.