CVE-2017-2688
HighSummary
The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF.
Risk Assessment
Attackers could exploit this vulnerability to hijack a user's session, potentially leading to unauthorized access to sensitive data or system functions.
Recommendation
It is recommended to implement CSRF protection mechanisms and regularly monitor active user sessions to minimize the risk of this vulnerability being exploited.
Other vulnerabilities in Siemens RUGGEDCOM ROX I
Original NVD description (English source)
The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS