CVE-2017-12739

Critical

Published: 15/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered on Siemens SICAM RTUs SM-2556 with specific firmware variants that allows unauthenticated remote attackers to execute arbitrary code via the integrated web server.

Risk Assessment

Attackers could remotely take control of the device, potentially leading to serious security implications for the system.

Recommendation

It is recommended to update the firmware to the latest version and secure access to the web server.

Original NVD description (English source)

An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow unauthenticated remote attackers to execute arbitrary code on the affected device.