SB2021022218 - Multiple vulnerabilities in Siemens RUGGEDCOM ROX IIB
Published: February 22, 2021
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 6 secuirty vulnerabilities.
1) Cache Attacks (CVE-ID: CVE-2018-12404)
The vulnerability allows a remote attacker to perform a downgrade attack on the server and decrypt private keys on the target system.The vulnerability exists due to a core weakness in TLS that relates to the handshaking of the session key which is used within the tunnel during parallelisation of thousands of oracle queries that occurs using a cluster of TLS servers which share the same public key certificate. A remote attacker can mount a microarchitectural side channel attack against a vulnerable implementation, obtain a network man-in-the-middle position, obtain the relevant data to sign and trigger the victim server to decrypt ciphertexts chosen by the adversary to perform a downgrade attack.
2) NULL pointer dereference (CVE-ID: CVE-2018-18508)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in Mozilla NSS within the CMS (Cryptographic Message Syntax) API. A remote attacker can perform a denial of service (DoS) attack.
3) Out-of-bounds write (CVE-ID: CVE-2019-11745)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input within the NSC_EncryptUpdate() function in /lib/softoken/pkcs11c.c, when performing padding operations in Mozilla NSS. A remote attacker can pass specially crafted data to the affected application, trigger out-of-bounds write and execute arbitrary code on the target system.
4) Heap-based buffer overflow (CVE-ID: CVE-2019-17006)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Mozilla NSS library when processing input text length while using certain cryptographic primitives. A remote attacker can pass specially crafted data to the application, trigger heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
5) Input validation error (CVE-ID: CVE-2019-17007)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input within the collect_certs() function in /lib/pkcs7/certread.c in Mozilla NSS library. A remote attacker can supply a specially crafted certificate to the application and perform a denial of service attack.
6) Input validation error (CVE-ID: CVE-2020-1763)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input when processing IKEv1 informational exchange messages. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.