Vulnerability Details CVE-2015-6675
Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.4%
CVSS Severity
CVSS v2 Score 4.3
References
- http://www.securitytracker.com/id/1033478
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-720081.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-15-244-01
- http://www.securitytracker.com/id/1033478
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-720081.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-15-244-01
Products affected by CVE-2015-6675
-
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.8.0
-
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:4.0.0
-
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:4.1.0