VDB

SSA-618620

SSA-618620 PUBLISHED CVSS 4.599999904632568 MEDIUM

The embedded DENX U-Boot boot loader has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled. The security vulnerability could be exploited by an attacker with local access to the affected systems. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known.

Risk Scores

CVSS 3.1
4.599999904632568
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

Affected Products

VendorProductVersions
SiemensRUGGEDCOM RMC8388 V4.X
SiemensRUGGEDCOM RSG907R
SiemensRUGGEDCOM RST2228
SiemensRUGGEDCOM RSG920P V5.X
SiemensRUGGEDCOM RST2228P
SiemensRUGGEDCOM RST916P
SiemensRUGGEDCOM RMC8388 V5.X
SiemensRUGGEDCOM RSL910
SiemensRUGGEDCOM RSG909R
SiemensRUGGEDCOM RSG2488NC V5.X
SiemensRUGGEDCOM RSG920PNC V4.X
SiemensRUGGEDCOM RMC8388NC V4.X
SiemensRUGGEDCOM RSG920P V4.X
SiemensRUGGEDCOM RSL910NC
SiemensRUGGEDCOM RSG2488 V4.X
SiemensRUGGEDCOM RST916C
SiemensRUGGEDCOM RSG2488 V5.X
SiemensRUGGEDCOM RSG920PNC V5.X
SiemensRUGGEDCOM RSG2488NC V4.X
SiemensRUGGEDCOM RSG910C

…and 2 more

Timeline

  • Dec 10, 2019 CVE Published
  • Dec 12, 2023 CVE Updated
Open in Interactive Console →
$ Console Community · 50/day Open console ›