CVE-2015-6675: Medium severity siemens ruggedcom rugged operating system vulnerability
Published Sep 11, 2015
·Updated
Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic.
Affected Software
3 affected components
Siemens Ruggedcom Rugged Operating System=3.8.0
Siemens Ruggedcom Rugged Operating System=4.0.0
Siemens Ruggedcom Rugged Operating System=4.1.0
Event History
Sep 11, 2015
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6675?
CVE-2015-6675 has a medium severity level, allowing attackers to bypass VLAN isolation.
2
How do I fix CVE-2015-6675?
To mitigate CVE-2015-6675, update to a version of Siemens Rugged Operating System that does not have the IP forwarding feature permanently enabled.
3
Which versions of Siemens Rugged Operating System are affected by CVE-2015-6675?
CVE-2015-6675 affects Siemens Ruggedcom ROS versions 3.8.0 through 4.1.x.
4
Can CVE-2015-6675 allow unauthorized access?
Yes, CVE-2015-6675 can enable unauthorized access by allowing remote attackers to send traffic that bypasses VLAN restrictions.
5
What systems are impacted by CVE-2015-6675?
CVE-2015-6675 impacts systems running Siemens Ruggedcom Rugged Operating System versions 3.8.0 to 4.1.x.