CVE:CVE-2021-37175
CNNVD:CNNVD-202109-804
Siemens RUGGEDCOM是德国西门子（Siemens）公司的一个通信设备。为电力，交通，石油和天然气及其他行业提供快速可靠的通信。
Siemens RUGGEDCOM 中存在授权问题漏洞，该漏洞源于产品在遍历文件时未能正确处理权限。攻击者可通过该漏洞访问任意文件。以下产品及版本受到影响：RUGGEDCOM ROX MX5000  V2.14.1 之前版本、 RUGGEDCOM ROX RX1400 V2.14.1 之前版本、 RUGGEDCOM ROX RX1500 V2.14.1之前版本、 RUGGEDCOM ROX RX1501 V2.14.1 之前版本、RUGGEDCOM ROX RX1510 V2.14.1 之前版本, RUGGEDCOM ROX RX1511 V2.14.1 之前版本, RUGGEDCOM ROX RX1512 V2.14.1 之前版本。
solution:Upgrade siemens ruggedcom_rox_rx1400_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_mx5000_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1500_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1501_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1510_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1511_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1512_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1524_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1536_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx5000_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1)