CVE-2023-36749

Summary

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). The webserver of the affected devices support insecure TLS 1.0 protocol. An attacker could achieve a man-in-the-middle attack and compromise confidentiality and integrity of data.

Affected Software

VendorProductVersion RangeStatus
SiemensRUGGEDCOM ROX MX5000All versions < V2.16.0affected
SiemensRUGGEDCOM ROX MX5000REAll versions < V2.16.0affected
SiemensRUGGEDCOM ROX RX1400All versions < V2.16.0affected
SiemensRUGGEDCOM ROX RX1500All versions < V2.16.0affected
SiemensRUGGEDCOM ROX RX1501All versions < V2.16.0affected
SiemensRUGGEDCOM ROX RX1510All versions < V2.16.0affected
SiemensRUGGEDCOM ROX RX1511All versions < V2.16.0affected
SiemensRUGGEDCOM ROX RX1512All versions < V2.16.0affected
SiemensRUGGEDCOM ROX RX1524All versions < V2.16.0affected
SiemensRUGGEDCOM ROX RX1536All versions < V2.16.0affected
SiemensRUGGEDCOM ROX RX5000All versions < V2.16.0affected

Weaknesses

  • CWE-327: CWE-327: Use of a Broken or Risky Cryptographic Algorithm

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References