Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-12736

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.

Published

2017-12-26T04:29:13.643

Last Modified

2025-08-12T12:15:26.210

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

6.5

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-1188
  • Type: Secondary
    CWE-665
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System siemens scalance_xb-200_firmware ≥ 3.0 Yes
Hardware siemens scalance_xb-200 - No
Operating System siemens scalance_xc-200_firmware ≥ 3.0 Yes
Hardware siemens scalance_xc-200 - No
Operating System siemens scalance_xp-200_firmware ≥ 3.0 Yes
Hardware siemens scalance_xp-200 - No
Operating System siemens scalance_xr300-wg_firmware ≥ 3.0 Yes
Hardware siemens scalance_xr300-wg - No
Operating System siemens scalance_xr-500_firmware ≥ 6.1 Yes
Hardware siemens scalance_xr-500 - No
Operating System siemens scalance_xm-400_firmware ≥ 6.1 Yes
Hardware siemens scalance_xm-400 - No
Operating System siemens ruggedcom_ros < 5.0.1 Yes
Hardware siemens ruggedcom_rsl910 - No
Operating System siemens ruggedcom_ros < 4.3.4 Yes
Hardware siemens ruggedcom - No
References