SSA-787941 V1.0: Denial of Service Vulnerability in RUGGEDCOM ROS V4

RUGGEDCOM ROS-based V4 devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP connections. The web server recovers by itself once the attack ends.

Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.

denial of service ruggedcom service ssa vulnerability