CVE-2022-2347

Ruggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Ruggedcom Rox are affected: RUGGEDCOM ROX MX5000 vers:intdot/RUGGEDCOM ROX MX5000RE vers:intdot/RUGGEDCOM ROX RX1400 vers:intdot/RUGGEDCOM ROX RX1500 vers:intdot/RUGGEDCOM ROX RX1501 vers:intdot/RUGGEDCOM ROX RX1510 vers:intdot/RUGGEDCOM ROX RX1511 vers:intdot/RUGGEDCOM ROX RX1512 vers:intdot/RUGGEDCOM ROX RX1524 vers:intdot/RUGGEDCOM ROX RX1536 vers:intdot/RUGGEDCOM ROX RX5000 vers:intdot/ CVSS Vendor Equipment Vulnerabilities v3 9.8 Siemens Siemens Ruggedcom Rox Uncontrolled Recursion, Integer Underflow (Wrap or Wraparound), Out-of-bounds Write, Out-of-bounds Read, Improper Input Validation, Heap-based Buffer Overflow, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Use After Free, Improper Validation of Syntactic Correctness of Input, Improper Control of a Resource Through its Lifetime, Integer Overflow or Wraparound, Incorrect Calculation of Buffer Size, Use of Weak Hash, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Stack-based Buffer Overflow, Expired Pointer Dereference Background Critical Infrastructure Sectors: Critical Manufacturing Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany

EPSS 0.03% · 10.6th percentile