Information disclosure in Siemens Ruggedcom_rugged_operating_system

CVE-2015-7836

Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame.

Vulnerability class: Information Disclosure

EPSS: 0.002 (45.5th percentile) — read the EPSS interpretation.

Affected products

Siemens Ruggedcom_rugged_operating_system
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
1033973 (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC)