CVEvulnerability

CVE-2015-1448

10.0 HIGH Published 2015-02-02 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-02-02
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-264

Description

The integrated management service on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allows remote attackers to bypass authentication and perform administrative actions via unspecified vectors.

Affected configurations

• siemens ruggedcom firmware (<= bs4.4.4621.31) • siemens ruggedcom firmware (<= ss4.4.4624.34)

Weakness · not in database (1)

CWE-264

References

http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-753139.pdf Vendor Advisory
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-753139.pdf Vendor Advisory

CVE-2015-1448

Description

Affected configurations

Related

Weakness · not in database (1)

References