Details of VAR-202308-0682

ID

VAR-202308-0682

CVE

CVE-2023-24845

TITLE

Siemens' RUGGEDCOM ROS Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2023-021983

DESCRIPTION

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM M969NC, RUGGEDCOM RMC30, RUGGEDCOM RMC30NC, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RMC8388NC V4.X, RUGGEDCOM RMC8388NC V5.X, RUGGEDCOM RP110, RUGGEDCOM RP110NC, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600FNC, RUGGEDCOM RS1600NC, RUGGEDCOM RS1600T, RUGGEDCOM RS1600TNC, RUGGEDCOM RS400, RUGGEDCOM RS400F, RUGGEDCOM RS400NC, RUGGEDCOM RS401, RUGGEDCOM RS401NC, RUGGEDCOM RS416, RUGGEDCOM RS416F, RUGGEDCOM RS416NC, RUGGEDCOM RS416NCv2 V4.X, RUGGEDCOM RS416NCv2 V5.X, RUGGEDCOM RS416P, RUGGEDCOM RS416PF, RUGGEDCOM RS416PNC, RUGGEDCOM RS416PNCv2 V4.X, RUGGEDCOM RS416PNCv2 V5.X, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000ANC, RUGGEDCOM RS8000H, RUGGEDCOM RS8000HNC, RUGGEDCOM RS8000NC, RUGGEDCOM RS8000T, RUGGEDCOM RS8000TNC, RUGGEDCOM RS900, RUGGEDCOM RS900, RUGGEDCOM RS900 (32M) V4.X, RUGGEDCOM RS900 (32M) V5.X, RUGGEDCOM RS900F, RUGGEDCOM RS900G, RUGGEDCOM RS900G (32M) V4.X, RUGGEDCOM RS900G (32M) V5.X, RUGGEDCOM RS900GF, RUGGEDCOM RS900GNC, RUGGEDCOM RS900GNC(32M) V4.X, RUGGEDCOM RS900GNC(32M) V5.X, RUGGEDCOM RS900GP, RUGGEDCOM RS900GPF, RUGGEDCOM RS900GPNC, RUGGEDCOM RS900L, RUGGEDCOM RS900L, RUGGEDCOM RS900LNC, RUGGEDCOM RS900LNC, RUGGEDCOM RS900M-GETS-C01, RUGGEDCOM RS900M-GETS-XX, RUGGEDCOM RS900M-STND-C01, RUGGEDCOM RS900M-STND-XX, RUGGEDCOM RS900MNC-GETS-C01, RUGGEDCOM RS900MNC-GETS-XX, RUGGEDCOM RS900MNC-STND-XX, RUGGEDCOM RS900MNC-STND-XX-C01, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC(32M) V4.X, RUGGEDCOM RS900NC(32M) V5.X, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910LNC, RUGGEDCOM RS910NC, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920LNC, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930LNC, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS940GF, RUGGEDCOM RS940GNC, RUGGEDCOM RS969, RUGGEDCOM RS969NC, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100F, RUGGEDCOM RSG2100NC, RUGGEDCOM RSG2100NC(32M) V4.X, RUGGEDCOM RSG2100NC(32M) V5.X, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100PF, RUGGEDCOM RSG2100PNC, RUGGEDCOM RSG2200, RUGGEDCOM RSG2200F, RUGGEDCOM RSG2200NC, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2288NC V4.X, RUGGEDCOM RSG2288NC V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300F, RUGGEDCOM RSG2300NC V4.X, RUGGEDCOM RSG2300NC V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PF, RUGGEDCOM RSG2300PNC V4.X, RUGGEDCOM RSG2300PNC V5.X, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG2488F, RUGGEDCOM RSG2488NC V4.X, RUGGEDCOM RSG2488NC V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSG920PNC V4.X, RUGGEDCOM RSG920PNC V5.X, RUGGEDCOM RSL910, RUGGEDCOM RSL910NC, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P. The affected products insufficiently block data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior. Siemens' RUGGEDCOM ROS Exists in unspecified vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. RUGGEDCOM's ROS-based devices, typically switches and serial-to-Ethernet devices, are used to connect equipment operating in harsh environments such as power substations and traffic control cabinets

Trust: 2.25

sources: NVD: CVE-2023-24845 // JVNDB: JVNDB-2023-021983 // CNVD: CNVD-2023-62028 // VULMON: CVE-2023-24845

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2023-62028

AFFECTED PRODUCTS

vendor:	siemens	model:	ruggedcom rs900	scope:	lt	version:	4.3.8	Trust: 1.2
vendor:	siemens	model:	ruggedcom rs900g	scope:	lt	version:	4.3.8	Trust: 1.2
vendor:	siemens	model:	ruggedcom rs900gnc	scope:	lt	version:	4.3.8	Trust: 1.2
vendor:	siemens	model:	ruggedcom rs900nc	scope:	lt	version:	4.3.8	Trust: 1.2
vendor:	siemens	model:	ruggedcom rsg2100	scope:	lt	version:	4.3.8	Trust: 1.2
vendor:	siemens	model:	ruggedcom rsg2100nc	scope:	lt	version:	4.3.8	Trust: 1.2
vendor:	siemens	model:	ruggedcom ros	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	ruggedcom ros	scope:	lt	version:	4.3.8	Trust: 1.0
vendor:	siemens	model:	ruggedcom ros	scope:	gte	version:	5.0.0	Trust: 1.0
vendor:	siemens	model:	ruggedcom ros	scope:	gte	version:	4.0.0	Trust: 1.0
vendor:	シーメンス	model:	ruggedcom ros	scope:	eq	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom ros	scope:	eq	version:	4.0.0 that's all 4.3.8	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom ros	scope:	eq	version:	4.3.8	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom ros	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom ros	scope:	eq	version:	5.0.0 that's all	Trust: 0.8
vendor:	siemens	model:	ruggedcom i800	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i800nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i801	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i801nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i802	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i802nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i803	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i803nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom m969	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom m969f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom m969nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom m2100	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom m2100f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom m2100nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom m2200	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom m2200f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom m2200nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rmc30	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rmc30nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rmc8388	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rmc8388	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rmc8388nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rmc8388nc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rp110	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rp110nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs400f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416nc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416p	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416pf	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416pnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416pnc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416pv2	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416v2	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900g	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900gf	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900gnc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900gp	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900gpf	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900gpnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900l	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900lnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900m-gets-c01	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900m-gets-xx	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900m-stnd-c01	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900m-stnd-xx	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900mnc-gets-c01	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900mnc-gets-xx	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900mnc-stnd-xx	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900mnc-stnd-xx-c01	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900nc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900w	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs910	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs910l	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs910lnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs910nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs910w	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs920l	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs920lnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs920w	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs930l	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs930lnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs930w	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs940g	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs940gf	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs940gnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs969	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs969nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg907r	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg908c	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg909r	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg910c	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg920p	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg920p	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg920pnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg920pnc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2100	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2100f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2100nc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2100p	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2100pf	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2100pnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2200	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2200f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2200nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2288	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2288	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2288nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2288nc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300nc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300p	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300p	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300pf	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300pnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300pnc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2488	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2488	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2488f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2488nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2488nc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsl910	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsl910nc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rst916c	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rst916p	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rst2228	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rst2228p	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs400	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs400nc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs401	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs401nc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900l	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900lnc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900nc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs1600	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs1600f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs1600fnc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs1600nc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs1600t	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs1600tnc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000a	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000anc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000h	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000hnc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000nc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000t	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000tnc	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2023-62028 // JVNDB: JVNDB-2023-021983 // NVD: CVE-2023-24845

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2023-24845
value:	CRITICAL
Trust: 1.0
productcert@siemens.com:	CVE-2023-24845
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2023-24845
value:	CRITICAL
Trust: 0.8
CNVD:	CNVD-2023-62028
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2023-62028
severity:	HIGH
baseScore:	9.4
vectorString:	AV:N/AC:L/AU:N/C:C/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	9.2
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2023-24845
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.1
Trust: 1.0
productcert@siemens.com:	CVE-2023-24845
baseSeverity:	CRITICAL
baseScore:	9.1
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.2
version:	3.1
Trust: 1.0
NVD:	CVE-2023-24845
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2023-62028 // JVNDB: JVNDB-2023-021983 // NVD: CVE-2023-24845 // NVD: CVE-2023-24845

PROBLEMTYPE DATA

problemtype:	NVD-CWE-Other	Trust: 1.0
problemtype:	CWE-684	Trust: 1.0
problemtype:	others (CWE-Other) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2023-021983 // NVD: CVE-2023-24845

PATCH

title:

Patch for Siemens RUGGEDCOM ROS Device Mirror Port Isolation Vulnerability

url:

https://www.cnvd.org.cn/patchInfo/show/449791

Trust: 0.6

sources: CNVD: CNVD-2023-62028

EXTERNAL IDS

db:	NVD	id:	CVE-2023-24845	Trust: 3.3
db:	SIEMENS	id:	SSA-908185	Trust: 2.5
db:	ICS CERT	id:	ICSA-23-222-12	Trust: 0.8
db:	JVN	id:	JVNVU90056839	Trust: 0.8
db:	JVNDB	id:	JVNDB-2023-021983	Trust: 0.8
db:	CNVD	id:	CNVD-2023-62028	Trust: 0.6
db:	VULMON	id:	CVE-2023-24845	Trust: 0.1

sources: CNVD: CNVD-2023-62028 // VULMON: CVE-2023-24845 // JVNDB: JVNDB-2023-021983 // NVD: CVE-2023-24845

REFERENCES

url:	https://cert-portal.siemens.com/productcert/pdf/ssa-908185.pdf	Trust: 1.9
url:	https://jvn.jp/vu/jvnvu90056839/	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2023-24845	Trust: 0.8
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-23-222-12	Trust: 0.8
url:	https://cert-portal.siemens.com/productcert/html/ssa-908185.html	Trust: 0.6
url:	https://nvd.nist.gov	Trust: 0.1

sources: CNVD: CNVD-2023-62028 // VULMON: CVE-2023-24845 // JVNDB: JVNDB-2023-021983 // NVD: CVE-2023-24845

SOURCES

db:	CNVD	id:	CNVD-2023-62028
db:	VULMON	id:	CVE-2023-24845
db:	JVNDB	id:	JVNDB-2023-021983
db:	NVD	id:	CVE-2023-24845

LAST UPDATE DATE

2024-08-14T12:59:50.390000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2023-62028	date:	2023-08-09T00:00:00
db:	VULMON	id:	CVE-2023-24845	date:	2023-08-08T00:00:00
db:	JVNDB	id:	JVNDB-2023-021983	date:	2024-01-22T02:02:00
db:	NVD	id:	CVE-2023-24845	date:	2023-11-14T11:15:09.080

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2023-62028	date:	2023-08-09T00:00:00
db:	VULMON	id:	CVE-2023-24845	date:	2023-08-08T00:00:00
db:	JVNDB	id:	JVNDB-2023-021983	date:	2024-01-22T00:00:00
db:	NVD	id:	CVE-2023-24845	date:	2023-08-08T10:15:13.963