CVE-2015-7836

Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame.

CVSS v2.0 3.3 LOW

3.3^/10

CVSS v2.0 : LOW

Vector : AV:A/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 6.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.securitytracker.com/id/1033973
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-921524.pdf	Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-15-300-01	Third Party Advisory US Government Resource
http://www.securitytracker.com/id/1033973
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-921524.pdf	Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-15-300-01	Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:37

Type	Values Removed	Values Added
References	~~() http://www.securitytracker.com/id/1033973 -~~	() http://www.securitytracker.com/id/1033973 -
References	~~() http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-921524.pdf - Vendor Advisory~~	() http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-921524.pdf - Vendor Advisory
References	~~() https://ics-cert.us-cert.gov/advisories/ICSA-15-300-01 - Third Party Advisory, US Government Resource~~	() https://ics-cert.us-cert.gov/advisories/ICSA-15-300-01 - Third Party Advisory, US Government Resource

Information

Published : 2015-10-28 10:59

Updated : 2024-11-21 02:37

NVD link : CVE-2015-7836

Mitre link : CVE-2015-7836

CVE.ORG link : CVE-2015-7836

JSON object : View

Products Affected

siemens

ruggedcom_rugged_operating_system

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2015-7836", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.3, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-10-28T10:59:17.780", "references": [{"url": "http://www.securitytracker.com/id/1033973", "source": "cve@mitre.org"}, {"url": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-921524.pdf", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-300-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1033973", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-921524.pdf", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-300-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame."}, {"lang": "es", "value": "Siemens RUGGEDCOM ROS en versiones anteriores a 4.2.1 permite a atacantes remotos obtener informaci\u00f3n sensible rastreando la red en busca de datos VLAN en la secci\u00f3n del padding en un marco de Ethernet."}], "lastModified": "2024-11-21T02:37:29.853", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5161CD44-9E93-4D7E-9F5D-82F25AFE7B04", "versionEndIncluding": "4.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}