NewsSiemens ProductCERT

    SSA-764417 V1.7 (Last Update: 2023-03-14): Weak Encryption Vulnerability in RUGGEDCOM ROS Devices

    The SSH server on RUGGEDCOM ROS devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. Siemens has released updates for the affected products and recommends to update to the latest versions.

    More on SSA-764417

    Other advisories

    Other news entries

    Source: https://cert-portal.siemens.com/productcert/html/ssa-764417.html

    ID