SSA-618620 V1.2 (Last Update: 2023-12-12): Vulnerabilities in Boot Loader (U-Boot) of RUGGEDCOM ROS Devices

The boot loader within RUGGEDCOM ROS contains two vulnerabilities in the loading process of the operating system kernel. The more severe of these vulnerabilities could allow an attacker with local access to the device to execute arbitrary code on an affected device.

Siemens recommends specific countermeasures to mitigate this issue.

access arbitrary code attacker boot code countermeasures device devices kernel loader local operating system process ros ruggedcom siemens ssa system u-boot update vulnerabilities