Siemens RUGGEDCOM ROS Mirror Port Isolation Vulnerability (CVE-2023-24845)

Key Information Summary Vulnerability Overview Vulnerability Name: Mirror Port Isolation Vulnerability in RUGGEDCOM ROS Devices CVE ID: CVE-2023-24845 CVSS v3.1 Base Score: 9.1 CVSS v3.1 Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/IA:H/I:H/E:P/RL:O/RC:C Description: A vulnerability has been identified in RUGGEDCOM ROS devices with mirror ports enabled, allowing attackers to inject information into the network's mirror port. Affected Products and Versions RUGGEDCOM M60F: All versions RUGGEDCOM M100F: All versions RUGGEDCOM M200F: All versions RUGGEDCOM ROS V4.X Series RUGGEDCOM ROS V5.X Series RUGGEDCOM RS9XX Series RUGGEDCOM RS90X Series RUGGEDCOM RS900XF Series RUGGEDCOM RS900XPF Series RUGGEDCOM RS6110F Series RUGGEDCOM RS6110PF Series RUGGEDCOM RS6220F Series RUGGEDCOM RS6330F Series RUGGEDCOM RS6330PF Series RUGGEDCOM RS6488P Series Mitigation Measures No fix is currently planned for this vulnerability. Refer to the recommendations in the “Workarounds and Mitigations” section. Workarounds and Mitigations Configure ingress filtering to control traffic when port mirroring is enabled: - Create ingress filters. - Disable neighbor discovery protocol on the destination port. - Disable IP forwarding on the source port. General Security Recommendations Follow Siemens’ operational guidelines for industrial security configuration. Consult Siemens’ industrial security operational guidelines and product-specific security recommendations. Product and Vulnerability Description Detailed description of all relevant CVE IDs and product-specific impacts. Additional Information Provides a temporary workaround for devices using the M900 chip. Lists affected RS900 models.

Goal Reached Thanks to every supporter — we hit 100%!

Siemens RUGGEDCOM ROS Mirror Port Isolation Vulnerability (CVE-2023-24845)