Vigil@nce - RuggedCom ROX: several vulnerabilities
March 2013 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An attacker can use several vulnerabilities of RuggedCom ROX, in
order to elevate his privileges, or to create a denial of service.
Impacted products: RuggedSwitch
Severity: 2/4
Creation date: 21/02/2013
DESCRIPTION OF THE VULNERABILITY
Several vulnerabilities were announced in RuggedCom ROX (Rugged
Operating System on LinuX).
An attacker can use JavaScript code on WebUI, in order to elevate
his privileges. [severity:2/4; 5348]
An attacker can use a SYN Flooding, in order to block the system.
[severity:2/4; 4803]
An attacker can use several multicast packets, in order to stop
the system. [severity:2/4; 3418]
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/RuggedCom-ROX-several-vulnerabilities-12445