high8.8
CVE-2017-12736
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.
Impact
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Scalance Xb-200 Firmware | from 3.0 |
| Siemens | Scalance Xc-200 Firmware | from 3.0 |
| Siemens | Scalance Xp-200 Firmware | from 3.0 |
| Siemens | Scalance Xr300-Wg Firmware | from 3.0 |
| Siemens | Scalance Xr-500 Firmware | from 6.1 |
| Siemens | Scalance Xm-400 Firmware | from 6.1 |
| Siemens | Ruggedcom Ros | before 5.0.1 before 4.3.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/101041
- http://www.securitytracker.com/id/1039463
- http://www.securitytracker.com/id/1039464
- https://cert-portal.siemens.com/productcert/html/ssa-856721.html
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf
- http://www.securityfocus.com/bid/101041
- http://www.securitytracker.com/id/1039463
- http://www.securitytracker.com/id/1039464
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf