Siemens RuggedCom Server < v2.13.0 Multiple Vulnerabilities

critical Nessus Network Monitor Plugin ID 700524

Synopsis

The remote host is running an outdated instance of RuggedCom Server and is affected by multiple vulnerabilities.

Description

The remote host has been identified as a RuggedCom server prior to v2.13.0, and is therefore affected by multiple vulnerabilities in the included Quagga package :

- The Quagga BGP daemon used to double-free memory when processing certain forms of UPDATE messages. This issue could be exploited by sending an optional/transitive UPDATE attribute that all conforming eBGP speakers should pass along. Consequently, a single UPDATE message could have affected many bgpd processes across a wide area of a network. Through this vulnerability, attackers could potentially have taken over control of affected bgpd processes remotely. (CVE-2018-5379)
- It was possible to overrun internal BGP code-to-string conversion tables in the Quagga BGP daemon. Configured peers could have exploited this issue and cause bgpd to emit debug and warning messages into the logs that would contained arbitrary bytes. (CVE-2018-5380)
- The Quagga BGP daemon could have entered an infinite loop if sent an invalid OPEN message by a configured peer. If this issue was exploited, then bgpd would cease to respond to any other events. BGP sessions would have been dropped and not be reestablished. The CLI interface would have been unresponsive. The bgpd daemon would have stayed in this state until restarted. (CVE-2018-5381)

Solution

Upgrade RuggedCom Server to version v2.13.0 or higher

Plugin Details

Severity: Critical

ID: 700524

Family: SCADA

Published: 4/10/2019

Updated: 4/10/2019

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:siemens:ruggedcom_rugged_operating_system

Patch Publication Date: 4/10/2019

Vulnerability Publication Date: 4/10/2019

Reference Information

CVE: CVE-2018-5379, CVE-2018-5380, CVE-2018-5381

BID: 103105

Detections

Analytics