ICSA-17-087-01

icsaUScisa_csaf_ot

Siemens RUGGEDCOM ROX I

view advisory published 2017-03-28

ATTENTION: Remotely exploitable/low skill level to exploit.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2017-6864USmedium5.4—
The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow an authenticated user to perform stored Cross-Site Scripting attacks.
CVE-2017-2689UShigh8.8—
Siemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or c…
CVE-2017-2688UShigh8.8—
The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user,…
CVE-2017-2687USmedium6.1—
Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspe…
CVE-2017-2686USmedium6.5—
Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access…
02

references

External citations — patches, advisories, analysis.

03

remediations (5)

  • FixedRUGGEDCOM ROX I

    As a general security measure Siemens strongly recommends protecting network access to the web interface at Port 10000/TCP of ROX I-based devices with appropriate mechanisms and configuring the environment according to Siemens ' operational guidelines in order to run the devices in a protected IT environment:

  • FixedRUGGEDCOM ROX I

    As a general security measure Siemens strongly recommends protecting network access to the web interface at Port 10000/TCP of ROX I-based devices with appropriate mechanisms and configuring the environment according to Siemens ' operational guidelines in order to run the devices in a protected IT environment:

  • FixedRUGGEDCOM ROX I

    As a general security measure Siemens strongly recommends protecting network access to the web interface at Port 10000/TCP of ROX I-based devices with appropriate mechanisms and configuring the environment according to Siemens ' operational guidelines in order to run the devices in a protected IT environment:

  • FixedRUGGEDCOM ROX I

    As a general security measure Siemens strongly recommends protecting network access to the web interface at Port 10000/TCP of ROX I-based devices with appropriate mechanisms and configuring the environment according to Siemens ' operational guidelines in order to run the devices in a protected IT environment:

  • FixedRUGGEDCOM ROX I

    As a general security measure Siemens strongly recommends protecting network access to the web interface at Port 10000/TCP of ROX I-based devices with appropriate mechanisms and configuring the environment according to Siemens ' operational guidelines in order to run the devices in a protected IT environment:

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan