VDB
SSA-618620
SSA-618620
PUBLISHED
CVSS 4.599999904632568 MEDIUM
The embedded DENX U-Boot boot loader has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled. The security vulnerability could be exploited by an attacker with local access to the affected systems. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known.
Risk Scores
CVSS 3.1
4.599999904632568
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | RUGGEDCOM RMC8388 V4.X | |
| Siemens | RUGGEDCOM RSG907R | |
| Siemens | RUGGEDCOM RST2228 | |
| Siemens | RUGGEDCOM RSG920P V5.X | |
| Siemens | RUGGEDCOM RST2228P | |
| Siemens | RUGGEDCOM RST916P | |
| Siemens | RUGGEDCOM RMC8388 V5.X | |
| Siemens | RUGGEDCOM RSL910 | |
| Siemens | RUGGEDCOM RSG909R | |
| Siemens | RUGGEDCOM RSG2488NC V5.X | |
| Siemens | RUGGEDCOM RSG920PNC V4.X | |
| Siemens | RUGGEDCOM RMC8388NC V4.X | |
| Siemens | RUGGEDCOM RSG920P V4.X | |
| Siemens | RUGGEDCOM RSL910NC | |
| Siemens | RUGGEDCOM RSG2488 V4.X | |
| Siemens | RUGGEDCOM RST916C | |
| Siemens | RUGGEDCOM RSG2488 V5.X | |
| Siemens | RUGGEDCOM RSG920PNC V5.X | |
| Siemens | RUGGEDCOM RSG2488NC V4.X | |
| Siemens | RUGGEDCOM RSG910C |
…and 2 more
Timeline
- Dec 10, 2019 CVE Published
- Dec 12, 2023 CVE Updated