SSL Security Flaw in RuggedCom Industrial Networking Devices

Aug. 28, 2012

According to a security researcher from security startup Cylance, industrial Ethernet switches and other devices produced by industrial networking equipment manufacturer RuggedCom contain a vulnerability that could be exploited to compromise SSL-based communications between them and their users.

According to a security researcher from security startup Cylance, industrial Ethernet switches and other devices produced by industrial networking equipment manufacturer RuggedCom contain a vulnerability that could be exploited to compromise SSL-based communications between them and their users.

The U.S. Department of Homeland Security's Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) said in a security alert that they are aware of a public report of hard-coded SSL private key within RuggedCom's Rugged Operatin System (ROS). ICS-CERT also said that Cylance Inc.'s security researcher Justin W. Clarke publicly presented the vulnerability with proof-of-concept (PoC) exploit code.

"This vulnerability does not directly allow for an authentication bypass," said Clarke. "What it allows is for an attacker to decrypt any SSL communication between an end-user's web browser and the RuggedCom device."

Learn more about this by reading the article "ICS-CERT Warns of SSL Security Flaw in RuggedCom Industrial Networking Devices" by PCWorld.com.

Sponsored Recommendations

Measurement instrumentation for improving hydrogen storage and transport

Hydrogen provides a decarbonization opportunity. Learn more about maximizing the potential of hydrogen.

Get Hands-On Training in Emerson's Interactive Plant Environment

Enhance the training experience and increase retention by training hands-on in Emerson's Interactive Plant Environment. Build skills here so you have them where and when it matters...

Learn About: Micro Motion™ 4700 Config I/O Coriolis Transmitter

An Advanced Transmitter that Expands Connectivity

Learn about: Micro Motion G-Series Coriolis Flow and Density Meters

The Micro Motion G-Series is designed to help you access the benefits of Coriolis technology even when available space is limited.