CVE-2015-5537: Medium severity siemens rox ii firmware vulnerability
Published Aug 3, 2015
·Updated
The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566.
Affected Software
2 affected components
Siemens Ruggedcom Rox Ii Firmware
Siemens Ruggedcom Rugged Operating System<4.2.0
Remediation
Event History
Aug 3, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5537?
CVE-2015-5537 has a medium severity rating due to its potential for man-in-the-middle attacks.
2
How do I fix CVE-2015-5537?
To fix CVE-2015-5537, upgrade the Siemens RuggedCom ROS to version 4.2.0 or later.
3
What types of devices are affected by CVE-2015-5537?
CVE-2015-5537 affects Siemens RuggedCom ROX II and versions of Rugged Operating System earlier than 4.2.0.
4
What kind of attack can exploit CVE-2015-5537?
CVE-2015-5537 can be exploited through a padding-oracle attack, enabling attackers to retrieve cleartext data.
5
Is CVE-2015-5537 a known vulnerability?
Yes, CVE-2015-5537 is a known vulnerability documented in security advisories.