all InfoSec news
SSA-419740 V1.0: Multiple Third-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2
Siemens ProductCERT Security Advisories cert-portal.siemens.com
Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special elements to improper handling of commands under certain circumstances, that could lead to code injection and denial of service.
Siemens has released updates for the affected products and recommends to update to the latest versions.
applet busybox code code injection component vulnerabilities denial of service handling injection kernel linux linux kernel openssl openvpn party products ruggedcom service siemens special ssa third third-party under update updates vulnerabilities