8.8high
CVE-2017-12736
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.
Published 8 y ago · modified 4 mo ago · JSON
CVSS
8.8
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
1.1%
percentile 65%
Public exploits
0
none known
Summary
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.
This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.
Exploit prediction (EPSS)
1.07% probability of exploitation in the next 30 days, higher than 65% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.0 | 8.8 | CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 5.8 | AV:A/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- Siemens RUGGEDCOM i800
- Siemens RUGGEDCOM i800NC
- Siemens RUGGEDCOM i801
- Siemens RUGGEDCOM i801NC
- Siemens RUGGEDCOM i802
- Siemens RUGGEDCOM i802NC
- Siemens RUGGEDCOM i803
- Siemens RUGGEDCOM i803NC
- Siemens RUGGEDCOM M2100
- Siemens RUGGEDCOM M2100NC
- Siemens RUGGEDCOM M2200
- Siemens RUGGEDCOM M2200NC
- Siemens RUGGEDCOM M969
- Siemens RUGGEDCOM M969NC
- Siemens RUGGEDCOM RMC30
- Siemens RUGGEDCOM RMC30NC
- Siemens RUGGEDCOM RMC8388 V4.X
- Siemens RUGGEDCOM RMC8388 V5.X
- Siemens RUGGEDCOM RMC8388NC V4.X
- Siemens RUGGEDCOM RMC8388NC V5.X
- Siemens RUGGEDCOM RP110
- Siemens RUGGEDCOM RP110NC
- Siemens RUGGEDCOM RS1600
- Siemens RUGGEDCOM RS1600F
- Siemens RUGGEDCOM RS1600FNC
- Siemens RUGGEDCOM RS1600NC
- Siemens RUGGEDCOM RS1600T
- Siemens RUGGEDCOM RS1600TNC
- Siemens RUGGEDCOM RS400
- Siemens RUGGEDCOM RS400NC
- Siemens RUGGEDCOM RS401
- Siemens RUGGEDCOM RS401NC
- Siemens RUGGEDCOM RS416
- Siemens RUGGEDCOM RS416NC
- Siemens RUGGEDCOM RS416NCv2 V4.X
- Siemens RUGGEDCOM RS416NCv2 V5.X
- Siemens RUGGEDCOM RS416P
- Siemens RUGGEDCOM RS416PNC
- Siemens RUGGEDCOM RS416PNCv2 V4.X
- Siemens RUGGEDCOM RS416PNCv2 V5.X
- Siemens RUGGEDCOM RS416Pv2 V4.X
- Siemens RUGGEDCOM RS416Pv2 V5.X
- Siemens RUGGEDCOM RS416v2 V4.X
- Siemens RUGGEDCOM RS416v2 V5.X
- Siemens RUGGEDCOM RS8000
- Siemens RUGGEDCOM RS8000A
- Siemens RUGGEDCOM RS8000ANC
- Siemens RUGGEDCOM RS8000H
- Siemens RUGGEDCOM RS8000HNC
- Siemens RUGGEDCOM RS8000NC
Classification
References
- siemens.com /cert/pool/cert/siemens_security_advisory_ssa-856721.pdf · x_refsource_CONFIRM, x_transferred
- securitytracker.com /id/1039463 · vdb-entry, x_refsource_SECTRACK, x_transferred
- securitytracker.com /id/1039464 · vdb-entry, x_refsource_SECTRACK, x_transferred
- securityfocus.com /bid/101041 · vdb-entry, x_refsource_BID, x_transferred
- cert-portal.siemens.com /productcert/html/ssa-856721.html
Sources
- CVE List: CVE-2017-12736
- NVD: CVE-2017-12736
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.