CVE-2021-37209 — Siemens / RUGGEDCOM i800

Description (CNA)

A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS930L (All versions < V4.3.8), RUGGEDCOM RS930W (All versions < V4.3.8), RUGGEDCOM RS940G (All versions < V4.3.8), RUGGEDCOM RS969 (All versions < V4.3.8), RUGGEDCOM RSG2100 (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2100P (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2200 (All versions < V4.3.8), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM RSG907R (All versions < V5.7.0), RUGGEDCOM RSG908C (All versions < V5.7.0), RUGGEDCOM RSG909R (All versions < V5.7.0), RUGGEDCOM RSG910C (All versions < V5.7.0), RUGGEDCOM RSG920P V4.X (All versions < V4.3.8), RUGGEDCOM RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM RSL910 (All versions < V5.7.0), RUGGEDCOM RST2228 (All versions < V5.7.0), RUGGEDCOM RST2228P (All versions < V5.7.0), RUGGEDCOM RST916C (All versions < V5.7.0), RUGGEDCOM RST916P (All versions < V5.7.0). The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.

Affected (CNA)

Vendor / product	Versions
Siemens / RUGGEDCOM i800	affected 0 before V4.3.8
Siemens / RUGGEDCOM i801	affected 0 before V4.3.8
Siemens / RUGGEDCOM i802	affected 0 before V4.3.8
Siemens / RUGGEDCOM i803	affected 0 before V4.3.8
Siemens / RUGGEDCOM M2100	affected 0 before V4.3.8
Siemens / RUGGEDCOM M2200	affected 0 before V4.3.8
Siemens / RUGGEDCOM M969	affected 0 before V4.3.8
Siemens / RUGGEDCOM RMC30	affected 0 before V4.3.8
Siemens / RUGGEDCOM RMC8388 V4.X	affected 0 before V4.3.8
Siemens / RUGGEDCOM RMC8388 V5.X	affected 0 before V5.7.0
Siemens / RUGGEDCOM RP110	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS1600	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS1600F	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS1600T	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS400	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS401	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS416	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS416P	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS416Pv2 V4.X	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS416Pv2 V5.X	affected 0 before V5.7.0
Siemens / RUGGEDCOM RS416v2 V4.X	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS416v2 V5.X	affected 0 before V5.7.0
Siemens / RUGGEDCOM RS8000	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS8000A	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS8000H	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS8000T	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS900	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS900 (32M) V4.X	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS900 (32M) V5.X	affected 0 before V5.7.0
Siemens / RUGGEDCOM RS900G	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS900G (32M) V4.X	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS900G (32M) V5.X	affected 0 before V5.7.0
Siemens / RUGGEDCOM RS900GP	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS900L	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS900M-GETS-C01	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS900M-GETS-XX	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS900M-STND-C01	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS900M-STND-XX	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS900W	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS910	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS910L	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS910W	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS920L	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS920W	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS930L	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS930W	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS940G	affected 0 before V4.3.8
Siemens / RUGGEDCOM RS969	affected 0 before V4.3.8
Siemens / RUGGEDCOM RSG2100	affected 0 before V4.3.8
Siemens / RUGGEDCOM RSG2100 (32M) V4.X	affected 0 before V4.3.8
Siemens / RUGGEDCOM RSG2100 (32M) V5.X	affected 0 before V5.7.0
Siemens / RUGGEDCOM RSG2100P	affected 0 before V4.3.8
Siemens / RUGGEDCOM RSG2100P (32M) V4.X	affected 0 before V4.3.8
Siemens / RUGGEDCOM RSG2100P (32M) V5.X	affected 0 before V5.7.0
Siemens / RUGGEDCOM RSG2200	affected 0 before V4.3.8
Siemens / RUGGEDCOM RSG2288 V4.X	affected 0 before V4.3.8
Siemens / RUGGEDCOM RSG2288 V5.X	affected 0 before V5.7.0
Siemens / RUGGEDCOM RSG2300 V4.X	affected 0 before V4.3.8
Siemens / RUGGEDCOM RSG2300 V5.X	affected 0 before V5.7.0
Siemens / RUGGEDCOM RSG2300P V4.X	affected 0 before V4.3.8
Siemens / RUGGEDCOM RSG2300P V5.X	affected 0 before V5.7.0
Siemens / RUGGEDCOM RSG2488 V4.X	affected 0 before V4.3.8
Siemens / RUGGEDCOM RSG2488 V5.X	affected 0 before V5.7.0
Siemens / RUGGEDCOM RSG907R	affected 0 before V5.7.0
Siemens / RUGGEDCOM RSG908C	affected 0 before V5.7.0
Siemens / RUGGEDCOM RSG909R	affected 0 before V5.7.0
Siemens / RUGGEDCOM RSG910C	affected 0 before V5.7.0
Siemens / RUGGEDCOM RSG920P V4.X	affected 0 before V4.3.8
Siemens / RUGGEDCOM RSG920P V5.X	affected 0 before V5.7.0
Siemens / RUGGEDCOM RSL910	affected 0 before V5.7.0
Siemens / RUGGEDCOM RST2228	affected 0 before V5.7.0
Siemens / RUGGEDCOM RST2228P	affected 0 before V5.7.0
Siemens / RUGGEDCOM RST916C	affected 0 before V5.7.0
Siemens / RUGGEDCOM RST916P	affected 0 before V5.7.0

CWE

CWE-326

References

ADP enrichment

CVE

No English description supplied.

https://cert-portal.siemens.com/productcert/pdf/ssa-764417.pdf

CISA-ADP

No English description supplied.

No references supplied.