PT-2017-15473

CVE-2017-2686

·

Publicado

2017-03-29

·

Atualizado

2017-07-12

Descrição por

CVSS 3.1
6.5
Média
MétricasAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROX I (all versions)
Description The issue allows an authenticated user to read arbitrary files through the web interface at port 10000/TCP, potentially accessing sensitive information.
Recommendations For all versions, restrict access to the web interface at port 10000/TCP to minimize the risk of exploitation. Consider implementing additional security measures to limit the ability of authenticated users to read arbitrary files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾