CVE-2017-2689

High

Published: 29/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Siemens RUGGEDCOM ROX I (all versions) allows an authenticated user to bypass access restrictions in the web interface at port 10000/TCP, enabling privileged file system access or configuration changes.

Risk Assessment

Bypassing access restrictions may lead to unauthorized configuration changes and potential security breaches.

Recommendation

It is recommended to update the software to the latest version and implement additional security measures to restrict access to the web interface.

Other vulnerabilities in Siemens RUGGEDCOM ROX I

CVE-2017-2688High
The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF.

Original NVD description (English source)

Siemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or change configuration settings.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS