SSA-459643

Vulnerability from csaf_siemens - Published: 2022-09-13 00:00 - Updated: 2023-04-11 00:00
Summary
SSA-459643: Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0

Notes

Summary
RUGGEDCOM ROS-based devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP connections. The web server recovers by itself once the attack ends. Siemens has released updates for the affected products and recommends to update to the latest versions.
General Recommendations
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
To clipboard 

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "RUGGEDCOM ROS-based devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP connections.\nThe web server recovers by itself once the attack ends.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-459643: Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0 - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-459643.html"
      },
      {
        "category": "self",
        "summary": "SSA-459643: Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0 - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-459643.json"
      },
      {
        "category": "self",
        "summary": "SSA-459643: Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0 - PDF Version",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-459643.pdf"
      },
      {
        "category": "self",
        "summary": "SSA-459643: Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0 - TXT Version",
        "url": "https://cert-portal.siemens.com/productcert/txt/ssa-459643.txt"
      }
    ],
    "title": "SSA-459643: Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0",
    "tracking": {
      "current_release_date": "2023-04-11T00:00:00Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-459643",
      "initial_release_date": "2022-09-13T00:00:00Z",
      "revision_history": [
        {
          "date": "2022-09-13T00:00:00Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2022-11-08T00:00:00Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added mitigations and renamed products to highlight the affected version line V5"
        },
        {
          "date": "2023-04-11T00:00:00Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Added missing affected products with no fix planned"
        }
      ],
      "status": "interim",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RMC8388 V5.X",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RMC8388 V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RMC8388NC V5.X",
                  "product_id": "2"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RMC8388NC V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RS416NC v2",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RS416NC v2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RS416PNC v2",
                  "product_id": "4"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RS416PNC v2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RS416Pv2",
                  "product_id": "5"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RS416Pv2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RS416v2",
                  "product_id": "6"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RS416v2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RS900 (32M) V5.X",
                  "product_id": "7"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RS900 (32M) V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RS900G (32M) V5.X",
                  "product_id": "8"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RS900G (32M) V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RS900GNC(32M) V5.X",
                  "product_id": "9"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RS900GNC(32M) V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RS900NC(32M) V5.X",
                  "product_id": "10"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RS900NC(32M) V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RSG2100 (32M) V5.X",
                  "product_id": "11"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG2100 (32M) V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RSG2100NC(32M) V5.X",
                  "product_id": "12"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG2100NC(32M) V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RSG2288 V5.X",
                  "product_id": "13"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG2288 V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RSG2288NC V5.X",
                  "product_id": "14"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG2288NC V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RSG2300 V5.X",
                  "product_id": "15"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG2300 V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RSG2300NC V5.X",
                  "product_id": "16"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG2300NC V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RSG2300P V5.X",
                  "product_id": "17"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG2300P V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RSG2300PNC V5.X",
                  "product_id": "18"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG2300PNC V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RSG2488 V5.X",
                  "product_id": "19"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG2488 V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RSG2488NC V5.X",
                  "product_id": "20"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG2488NC V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RSG907R",
                  "product_id": "21"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG907R"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RSG908C",
                  "product_id": "22"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG908C"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RSG909R",
                  "product_id": "23"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG909R"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RSG910C",
                  "product_id": "24"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG910C"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RSG920P V5.X",
                  "product_id": "25"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG920P V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RSG920PNC V5.X",
                  "product_id": "26"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSG920PNC V5.X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RSL910",
                  "product_id": "27"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSL910"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RSL910NC",
                  "product_id": "28"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RSL910NC"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RST2228",
                  "product_id": "29"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RST2228"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RST2228P",
                  "product_id": "30"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RST2228P"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RST916C",
                  "product_id": "31"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RST916C"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV5.6.0",
                "product": {
                  "name": "RUGGEDCOM RST916P",
                  "product_id": "32"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RST916P"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-39158",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Affected devices improperly handle partial HTTP requests which makes them vulnerable to slowloris attacks. \r\n\r\nThis could allow a remote attacker to create a denial of service condition that persists until the attack ends.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22",
          "23",
          "24",
          "25",
          "26",
          "27",
          "28",
          "29",
          "30",
          "31",
          "32"
        ]
      },
      "remediations": [
        {
          "category": "none_available",
          "details": "Currently no fix is available",
          "product_ids": [
            "2",
            "3",
            "4",
            "9",
            "10",
            "12",
            "14",
            "16",
            "18",
            "20",
            "26",
            "28"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.6.0 or later version",
          "product_ids": [
            "1",
            "5",
            "6",
            "7",
            "8",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "22",
            "23",
            "24",
            "25",
            "27",
            "29",
            "30",
            "31",
            "32"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109806156/"
        },
        {
          "category": "workaround",
          "details": "Restrict access to port 80/tcp and 443/tcp to trusted IP addresses only",
          "product_ids": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
          "product_ids": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32"
          ]
        }
      ],
      "title": "CVE-2022-39158"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.