Siemens RUGGEDCOM ROX II Cross-Site Request Forgery (CVE-2020-28398)

The CLI feature in the web interface of affected devices is vulnerable to cross-site request forgery CSRF. This could allow an attacker to read or modify the device configuration by tricking an authenticated legitimate user into accessing a malicious link. This plugin only works with Tenable.ot...

CVE-2020-28398

creationtimestamp| type| source ---|---|--- 2024-12-10 16:38:23+00:00| seen| https://t.me/cvedetector/12512 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-03...

CVE-2020-28398

The vulnerability CVE-2020-28398 affects Siemens RUGGEDCOM ROX devices (MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with all versions prior to V2.16.0. The CLI feature in the web interface is susceptible to cross-site request forgery (CSRF). An attack...