Lucene search

[email protected]CVE-2017-12736

HistoryDec 26, 2017 - 4:29 a.m.

CVE-2017-12736

2017-12-2604:29:13

CWE-20

CWE-665

[email protected]

web.nvd.nist.gov

cve

2017

12736

ruggedcom ros

vulnerability

rsl910

scalance

xb-200

xc-200

xp-200

xr300-wg

xr-500

xm-400

security

5.8 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

A vulnerability has been identified in RUGGEDCOM ROS for RSL910 devices (All versions < ROS V5.0.1), RUGGEDCOM ROS for all other devices (All versions < ROS V4.3.4), SCALANCE XB-200/XC-200/XP-200/XR300-WG (All versions between V3.0 (including) and V3.0.2 (excluding)), SCALANCE XR-500/XM-400 (All versions between V6.1 (including) and V6.1.1 (excluding)). After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to writeto the device under certain conditions, potentially allowing users located in the adjacentnetwork of the targeted device to perform unauthorized administrative actions.

Affected configurations

NVD

Node

siemensscalance_xb-200_firmwareRange3.0≥

AND

siemensscalance_xb-200Match-

Node

siemensscalance_xc-200_firmwareRange3.0≥

AND

siemensscalance_xc-200Match-

Node

siemensscalance_xp-200_firmwareRange3.0≥

AND

siemensscalance_xp-200Match-

Node

siemensscalance_xr300-wg_firmwareRange3.0≥

AND

siemensscalance_xr300-wgMatch-

Node

siemensscalance_xr-500_firmwareRange6.1≥

AND

siemensscalance_xr-500Match-

Node

siemensscalance_xm-400_firmwareRange6.1≥

AND

siemensscalance_xm-400Match-

Node

siemensruggedcom_rosRange<5.0.1

AND

siemensruggedcom_rsl910Match-

Node

siemensruggedcom_rosRange<4.3.4

AND

siemensruggedcomMatch-

CPENameOperatorVersion
siemens:scalance_xb-200_firmwaresiemens scalance xb-200 firmwareeq*

CPE	Name	Operator	Version
siemens:scalance_xb-200_firmware	siemens scalance xb-200 firmware	eq	*

CNA Affected

[
  {
    "product": "RUGGEDCOM ROS for RSL910 devices, RUGGEDCOM ROS for all other devices, SCALANCE XB-200/XC-200/XP-200/XR300-WG, SCALANCE XR-500/XM-400",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "RUGGEDCOM ROS for RSL910 devices : All versions < ROS V5.0.1"
      },
      {
        "status": "affected",
        "version": "RUGGEDCOM ROS for all other devices : All versions < ROS V4.3.4"
      },
      {
        "status": "affected",
        "version": "SCALANCE XB-200/XC-200/XP-200/XR300-WG : All versions between V3.0 (including) and V3.0.2 (excluding)"
      },
      {
        "status": "affected",
        "version": "SCALANCE XR-500/XM-400 : All versions between V6.1 (including) and V6.1.1 (excluding)"
      }
    ]
  }
]

References

www.securityfocus.com/bid/101041

www.securitytracker.com/id/1039463

www.securitytracker.com/id/1039464

www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf

5.8 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

Related for CVE-2017-12736

ics3 cvelist1 nvd1 nessus1 prion1