Siemens RUGGEDCOM ROX II IPsec Vulnerability

The Siemens RUGGEDCOM ROX II family is a line of industrial Ethernet switches used in harsh and climatically demanding environments, such as electric utility substations and traffic control cabinets. These devices are designed to operate reliably in these conditions but have been found to contain multiple high-severity vulnerabilities.

You're affected if you use A vulnerability. Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

1. Update to V2.17.0 or later version from https://support.industry.siemens.com/cs/ww/en/view/109997648/
2. Immediate mitigations:
3. Restrict network access to your RUGGEDCOM ROX II instance (firewall it from the public internet)
4. Audit admin account activity for suspicious access patterns
5. Monitor for unauthorized token creation

• Vendor Advisory