Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic.
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Link | Tags |
---|---|
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-720081.pdf | vendor advisory |
http://www.securitytracker.com/id/1033478 | vdb entry |
https://ics-cert.us-cert.gov/advisories/ICSA-15-244-01 | third party advisory us government resource |