Siemens ruggedcom rox-based device NTP Input Validation Vulnerability (CVE-2015-5300)

Siemens ruggedcom rox-based device NTP Input Validation Vulnerability (CVE-2015-5300)

Affected Systems:

Siemens ruggedcom rox <2.9.0

Description:

CVE (CAN) ID: CVE-2015-5300

Siemens ruggedcom rox-based devices are used to connect devices in harsh environments.

Siemens ruggedcom rox-based devices have the input verification vulnerability. In some environments, constructed UDP packets are sent to the NTP service (Port 123/UDP ), attackers can exploit this vulnerability to modify the time on the device.

<* Source: Siemens
*>

Suggestion:

Vendor patch:

Siemens
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.siemens.com/automation/support-request