CVE-2015-1449
Buffer overflow in the integrated web server on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmwa...
Affects 6 products across 1 vendor.
Parent class for buffer-related vulnerabilities where operations exceed buffer boundaries.
Show all 12
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A critical buffer overflow vulnerability exists in the integrated web server of Siemens Ruggedcom WIN51xx, WIN52xx, WIN70xx, and WIN72xx devices with firmware versions prior to SS4.4.4624.35 and BS4.4.4621.32, respectively. This vulnerability allows remote attackers to execute arbitrary code, potentially leading to complete system compromise. Immediate action is required to mitigate the risk.
BSID: BS-2015-GLOBAL-103269-C • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2015-1449?
What is the CVSS score for CVE-2015-1449?
Is CVE-2015-1449 actively exploited?
How do I remediate CVE-2015-1449?
What systems are affected by CVE-2015-1449?
What NERC-CIP standard applies to CVE-2015-1449?
What IEC 62443 requirement maps to CVE-2015-1449?
| CVE ID | CVE-2015-1449 |
|---|---|
| BSID | BS-2015-GLOBAL-103269-C BreachSpider Global ID |
| CVSS Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Published | 2015-02-02 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 100% |
| Weakness (CWE) | |
| Verticals | |
| Source | NVD |
Buffer overflow in the integrated web server on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allows remote attackers to execute arbitrary code via unspecified vectors.
Source: NIST NVD / MITRE CVE Database
The vulnerability can be exploited by sending specially crafted requests to the integrated web server of the affected Siemens Ruggedcom devices. The buffer overflow occurs due to insufficient input validation, allowing an attacker to overflow a buffer and execute arbitrary code with the privileges of the web server process.
Exploitation Likelihood: MEDIUM
| Vendor | Product | Affected Versions |
|---|---|---|
| Siemens | Ruggedcom (device & firmware) | ≤ ss4.4.4624.34 |
Platforms listed by the source (the vulnerable product runs on these; they are not themselves vulnerable): Siemens Ruggedcom Win7000, Siemens Ruggedcom Win7200, Siemens Ruggedcom Win5100, Siemens Ruggedcom Win5200
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
Implement network segmentation to isolate the affected devices from untrusted networks. Apply strict access control lists (ACLs) to limit access to the web server interface.
No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. A network rule is only drafted when a concrete on-the-wire signature can be grounded in the advisory.
This CVE violates CIP-007-R2 because it allows unauthorized access to the control system, which could result in the loss of control or damage to the system.
This CVE maps to SR 7.6 because it involves a vulnerability that can be exploited remotely to execute arbitrary code, which could compromise the integrity and availability of the industrial control system.
Drafted by AI and not validated for your network. Test in an isolated environment before any production deployment. Compensating control only - does not replace vendor patch.
AI Enrichment Record — provenance & audit hash
| Model | Qwen/Qwen2.5-72B-Instruct-AWQ |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 57f07c668808fbcfaec8c3d1d837b85c3e21031b87f8afba44dd0078b64c0985a818627d6be2335e08fd3b006c315e1380c608a9805c8bf8db7b776d024576e4 |
Critical Severity - Know Your Exposure
A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →