A vulnerability has been identified in RUGGEDCOM ROS for RSL910 devices (All versions < ROS V5.0.1), RUGGEDCOM ROS for all other devices (All versions < ROS V4.3.4), SCALANCE XB-200/XC-200/XP-200/XR300-WG (All versions between V3.0 (including) and V3.0.2 (excluding)), SCALANCE XR-500/XM-400 (All versions between V6.1 (including) and V6.1.1 (excluding)). After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to writeto the device under certain conditions, potentially allowing users located in the adjacentnetwork of the targeted device to perform unauthorized administrative actions.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published: 2017-12-26T04:00:00Z

Updated: 2024-09-17T02:37:15.644Z

Reserved: 2017-08-09T00:00:00

Link: CVE-2017-12736

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2017-12-26T04:29:13.643

Modified: 2019-10-03T00:03:26.223

Link: CVE-2017-12736

cve-icon Redhat

No data.