CVE-2017-12736
High
Description
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.
SeverityHigh
CVSS8.8
Exploit probability—
ProductSiemens Ruggedcom Ros
PublishedDec 26, 2017
First seenDec 26, 2017
Weakness typeCWE-1188CWE-1188
How to fix
Update
- siemens ruggedcom_ros5.0.1, 4.3.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens ruggedcom_ros | v < 5.0.1, v < 4.3.4 | 5.0.1, 4.3.4 |
| siemens scalance_xb-200_firmware | 3.0 ≤ v | — |
| siemens scalance_xc-200_firmware | 3.0 ≤ v | — |
| siemens scalance_xp-200_firmware | 3.0 ≤ v | — |
| siemens scalance_xr300-wg_firmware | 3.0 ≤ v | — |
| siemens scalance_xr-500_firmware | 6.1 ≤ v | — |
| siemens scalance_xm-400_firmware | 6.1 ≤ v | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.