SSA-840800 V1.0: Code Injection Vulnerability in RUGGEDCOM ROS

RUGGEDCOM ROS-based devices are vulnerable to a web-based code injection attack. To execute this attack, it is necessary to access the system via the console.

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

access attack code code injection code injection vulnerability console countermeasures devices injection injection attack latest products ros ruggedcom siemens ssa system update updates vulnerability vulnerable web