CVEvulnerability

CVE-2017-12736

8.8 HIGH Published 2017-12-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-12-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-1188, CWE-665

Description

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.

Affected configurations

• siemens scalance xb-200 firmware (>= 3.0) • siemens scalance xc-200 firmware (>= 3.0) • siemens scalance xp-200 firmware (>= 3.0) • siemens scalance xr300-wg firmware (>= 3.0) • siemens scalance xr-500 firmware (>= 6.1) • siemens scalance xm-400 firmware (>= 6.1) • siemens ruggedcom ros (< 5.0.1) • siemens ruggedcom ros (< 4.3.4)

Related

Weakness · CWE (2)

  • CWE-1188 Initialization of a Resource with an Insecure Default weakness
  • CWE-665 Improper Initialization weakness

References