CVE-2017-2688

2017-03-2901:00:00

CWE-352

siemens

www.cve.org

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.8%

JSON

The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF.

CNA Affected

[
  {
    "product": "RUGGEDCOM ROX I All versions",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "RUGGEDCOM ROX I All versions"
      }
    ]
  }
]