Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Siemens RuggedCom ROS和ROX II设备信息泄露漏洞
Vulnerability Description
Siemens RuggedCom ROS and ROX II是德国西门子（Siemens）公司的一套用于RuggedCom系列交换机中的操作系统。 Siemens RuggedCom ROS 4.2.0之前版本和ROX II的SSL layer of the HTTPS服务中存在安全漏洞，该漏洞源于程序没有正确实现CBC填充。攻击者可通过实施padding-oracle攻击利用该漏洞实施中间人攻击，获取明文数据。
CVSS Information
N/A
Vulnerability Type
N/A