CVE-2017-127368.8HighCWE-1188

CVE-2017-12736: Siemens RUGGEDCOM i800 vulnerability

Siemens · RUGGEDCOM i800

Vendor fix available · Affected: Siemens RUGGEDCOM i800 · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.1%probability of exploitation in the next 30 days

65th percentile

050100

Higher than 65% of scored CVEs

8.8HighCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.

Affected products20

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Siemens · RUGGEDCOM i800before V4.3.4
Siemens · RUGGEDCOM i800NCbefore V4.3.4
Siemens · RUGGEDCOM i801before V4.3.4
Siemens · RUGGEDCOM i801NCbefore V4.3.4
Siemens · RUGGEDCOM i802before V4.3.4
Siemens · RUGGEDCOM i802NCbefore V4.3.4
Siemens · RUGGEDCOM i803before V4.3.4
Siemens · RUGGEDCOM i803NCbefore V4.3.4
Siemens · RUGGEDCOM M2100before V4.3.4
Siemens · RUGGEDCOM M2100NCbefore V4.3.4
Siemens · RUGGEDCOM M2200before V4.3.4
Siemens · RUGGEDCOM M2200NCbefore V4.3.4
Siemens · RUGGEDCOM M969before V4.3.4
Siemens · RUGGEDCOM M969NCbefore V4.3.4
Siemens · RUGGEDCOM RMC30before V4.3.4
Siemens · RUGGEDCOM RMC30NCbefore V4.3.4
Siemens · RUGGEDCOM RMC8388 V4.Xbefore V4.3.4
Siemens · RUGGEDCOM RMC8388 V5.Xbefore V5.0.1
Siemens · RUGGEDCOM RMC8388NC V4.Xbefore V4.3.4
Siemens · RUGGEDCOM RMC8388NC V5.Xbefore V5.0.1

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Initialization of a Resource with an Insecure Default · Misconfiguration and Insecure Design
Vendor: Siemens
Published: December 2017
Band: Possible (1 to 10%), December 2017

CoverageNo articles yet

No CyberSIXT article names CVE-2017-12736 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.