Siemens RUGGEDCOM ROS

An attacker could run arbitrary code on your RUGGEDCOM switch, potentially altering network traffic, disrupting communications between PLCs and control systems, or gaining access to connected industrial devices. This could halt or compromise critical operations in power distribution or water treatment networks.

This affects operators of Siemens RUGGEDCOM managed industrial switches used throughout utility networks for critical communications. RUGGEDCOM devices are commonly deployed in substations, control centers, and networked PLC environments in electric utilities and water authorities. The RS series (RS400, RS900, RS910, RS920, RS930, RS940, RS8000) and RSG series (RSG2100, RSG2200, RSG2300, RSG2488) are the most widely deployed. Any facility relying on RUGGEDCOM for network backbone connectivity in OT environments should be considered at risk.

An attacker on the network sends a malicious packet to the RUGGEDCOM device exploiting the buffer overflow in the third-party component. The device processes the packet unsafely, allowing the attacker to overwrite memory and execute arbitrary commands on the switch itself. No authentication is required; the device is vulnerable upon receipt of the crafted network traffic.