CVE-2015-1357: Infoleak
First published: Mon Feb 02 2015(Updated: )
Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allow context-dependent attackers to discover password hashes by reading (1) files or (2) security logs.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens Ruggedcom Firmware | <=bs4.4.4621.31 | |
| Siemens Ruggedcom Win7000 Firmware | ||
| Siemens Ruggedcom WIN7200 Firmware | ||
| Siemens Ruggedcom Firmware | <=ss4.4.4624.34 | |
| Siemens RUGGEDCOM WIN5100 series subscriber unit | ||
| Siemens RUGGEDCOM WIN5200 series subscriber unit |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-1357?
CVE-2015-1357 is classified as a medium severity vulnerability that could allow attackers to discover password hashes.
How do I fix CVE-2015-1357?
To mitigate CVE-2015-1357, update the firmware of affected Siemens Ruggedcom devices to versions SS4.4.4624.35 or BS4.4.4621.32 or later.
Which Siemens Ruggedcom devices are affected by CVE-2015-1357?
CVE-2015-1357 affects WIN51xx and WIN52xx devices with firmware before SS4.4.4624.35, and WIN70xx and WIN72xx devices with firmware before BS4.4.4621.32.
Can CVE-2015-1357 lead to unauthorized access?
Yes, CVE-2015-1357 can potentially lead to unauthorized access if attackers successfully retrieve password hashes.
Is there a patch available for CVE-2015-1357?
Yes, Siemens has released firmware updates for the affected devices to address the vulnerability described in CVE-2015-1357.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/references
- agent/weakness
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/siemens
- canonical/siemens ruggedcom firmware
- version/siemens ruggedcom firmware/bs4.4.4621.31
- canonical/siemens ruggedcom win7000 firmware
- canonical/siemens ruggedcom win7200 firmware
- version/siemens ruggedcom firmware/ss4.4.4624.34
- canonical/siemens ruggedcom win5100 series subscriber unit
- canonical/siemens ruggedcom win5200 series subscriber unit