CVE-2015-7836

Опубликовано: 28 окт. 2015

Источник: nvd

CVSS2: 3.3

EPSS Низкий

Описание

Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame.

Ссылки

http://www.securitytracker.com/id/1033973
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-921524.pdf
Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-15-300-01
Third Party Advisory
US Government Resource
http://www.securitytracker.com/id/1033973
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-921524.pdf
Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-15-300-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:*:*:*:*:*:*:*:*

Версия до 4.2.0 (включая)

EPSS

Процентиль: 50%

0.00267

Низкий

3.3 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-h2rm-qfv5-q82p

github

больше 3 лет назад