8.8
CVE-2017-12736
- EPSS 0.28%
- Veröffentlicht 26.12.2017 04:29:13
- Zuletzt bearbeitet 12.08.2025 12:15:26
- Quelle productcert@siemens.com
- Teams Watchlist Login
- Unerledigt Login
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Scalance Xb-200 Firmware Version >= 3.0
Siemens ≫ Scalance Xc-200 Firmware Version >= 3.0
Siemens ≫ Scalance Xp-200 Firmware Version >= 3.0
Siemens ≫ Scalance Xr300-wg Firmware Version >= 3.0
Siemens ≫ Scalance Xr-500 Firmware Version >= 6.1
Siemens ≫ Scalance Xm-400 Firmware Version >= 6.1
Siemens ≫ Ruggedcom Ros Version < 5.0.1
Siemens ≫ Ruggedcom Ros Version < 4.3.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.28% | 0.511 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| productcert@siemens.com | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 5.8 | 6.5 | 6.4 |
AV:A/AC:L/Au:N/C:P/I:P/A:P
|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-1188 Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.
CWE-665 Improper Initialization
The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.