Siemens RUGGEDCOM RST2428P Resource Exhaustion Vulnerability Leading to Denial-of-Service

A resource exhaustion vulnerability has been identified in the Siemens RUGGEDCOM RST2428P (6GK6242-6PA00) device, all versions. When the device is subjected to high volumes of query requests, it may experience a temporary denial-of-service condition. The system is expected to recover once the excessive activity subsides.

Impact

Exploitation of this vulnerability can cause a temporary denial-of-service condition, with the system recovering after the high volume of query requests is reduced.

Remediation

Currently, no fix is available for this vulnerability. However, it is recommended to create a firewall rule that blocks the UDP ports used by the device for discovery protocols, such as LLDP, DCP, and MRP, if those ports are not required. The device uses UDP port 34964 and one port in the range of 49152-65535 for these discovery protocols.