CVE:CVE-2021-37173
CNNVD:CNNVD-202109-810
Siemens RUGGEDCOM是德国西门子（Siemens）公司的一个通信设备。为电力，交通，石油和天然气及其他行业提供快速可靠的通信。
Siemens RUGGEDCOM ROX 存在信息泄露漏洞，该漏洞允许经过身份验证的攻击者通过安全外壳提取数据。以下产品及版本受到影响：RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1)。
solution:Upgrade siemens ruggedcom_rox_rx1400_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_mx5000_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1500_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1501_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1510_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1511_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1512_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1524_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx1536_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1); Upgrade siemens ruggedcom_rox_rx5000_firmware to a higher version than 2.14.1,and avoid the version (,2.14.1)