Auth bypass in Siemens Ruggedcom_rs950g

CVE-2014-2590

The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service (interface outage) via crafted HTTP packets.

Vulnerability class: Broken Authentication

EPSS: 0.003 (54.1th percentile) — read the EPSS interpretation.

Affected products

Siemens Ruggedcom_rs950g
Siemens Ruggedcom_rsg2488
Siemens Ruggedcom_rugged_operating_system
N/a — versions n/a

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

cve@mitre.org (Permissions Required, US Government Resource, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Broken Link, Vendor Advisory)