{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2021-37209", "ASSIGNER": "productcert@siemens.com", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS930L (All versions < V4.3.8), RUGGEDCOM RS930W (All versions < V4.3.8), RUGGEDCOM RS940G (All versions < V4.3.8), RUGGEDCOM RS969 (All versions < V4.3.8), RUGGEDCOM RSG2100 (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2100P (All versions < V4.3.8), RUGGEDCOM RSG2200 (All versions < V4.3.8), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM RSG907R (All versions < V5.7.0), RUGGEDCOM RSG908C (All versions < V5.7.0), RUGGEDCOM RSG909R (All versions < V5.7.0), RUGGEDCOM RSG910C (All versions < V5.7.0), RUGGEDCOM RSG920P V4.X (All versions < V4.3.8), RUGGEDCOM RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM RSL910 (All versions < V5.7.0), RUGGEDCOM RST2228 (All versions < V5.7.0), RUGGEDCOM RST2228P (All versions < V5.7.0), RUGGEDCOM RST916C (All versions < V5.7.0), RUGGEDCOM RST916P (All versions < V5.7.0). The SSH server on affected devices is configured to offer weak ciphers by default.\r\n\r\nThis could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-326: Inadequate Encryption Strength", "cweId": "CWE-326" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "Siemens", "product": { "product_data": [ { "product_name": "RUGGEDCOM i800", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM i801", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM i802", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM i803", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM M2100", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM M2200", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM M969", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RMC30", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RMC8388 V4.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RMC8388 V5.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RP110", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS1600", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS1600F", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS1600T", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS400", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS401", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS416", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS416P", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS416Pv2 V4.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS416Pv2 V5.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RS416v2 V4.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS416v2 V5.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RS8000", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS8000A", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS8000H", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS8000T", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS900", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS900 (32M) V4.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS900 (32M) V5.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RS900G", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS900G (32M) V4.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS900G (32M) V5.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RS900GP", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS900L", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS900M-GETS-C01", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS900M-GETS-XX", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS900M-STND-C01", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS900M-STND-XX", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS900W", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS910", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS910L", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS910W", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS920L", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS920W", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS930L", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS930W", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS940G", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RS969", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RSG2100", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RSG2100 (32M) V4.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RSG2100 (32M) V5.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RSG2100P", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RSG2200", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RSG2288 V4.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RSG2288 V5.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RSG2300 V4.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RSG2300 V5.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RSG2300P V4.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RSG2300P V5.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RSG2488 V4.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RSG2488 V5.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RSG907R", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RSG908C", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RSG909R", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RSG910C", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RSG920P V4.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.3.8" } ] } }, { "product_name": "RUGGEDCOM RSG920P V5.X", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RSL910", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RST2228", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RST2228P", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RST916C", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } }, { "product_name": "RUGGEDCOM RST916P", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.7.0" } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-764417.pdf", "refsource": "MISC", "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-764417.pdf" } ] }, "impact": { "cvss": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H/E:P/RL:U/RC:C", "baseScore": 6.7, "baseSeverity": "MEDIUM" } ] } }