NetSight
IP …
medium4.3

CVE-2015-5537

The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-t…

Impact

The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566.

Affected products

VendorProductAffected versions
SiemensRuggedcom Rox Ii Firmware
All versions
SiemensRuggedcom Rugged Operating System
before 4.2.0

Weakness classification

CWE-312

References