VULNERABILITY INTELLIGENCE

CVE-2014-2590

CVSS score5 MEDIUM

EPSS probability2.41%

CISA KEVNot currently listed

Published2014-04-01

Last modified2026-06-17

CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service (interface outage) via crafted HTTP packets.

Weakness classification

CWE-306: Missing Authentication for Critical Function

Primary references

cve@mitre.org — Permissions Required, Third Party Advisory, US Government Resource
cve@mitre.org — Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Vendor Advisory