PT-2017-15473
CVE-2017-2686
·
Published
2017-03-29
·
Updated
2017-07-12
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Siemens RUGGEDCOM ROX I (all versions)
Description
The issue allows an authenticated user to read arbitrary files through the web interface at port 10000/TCP, potentially accessing sensitive information.
Recommendations
For all versions, restrict access to the web interface at port 10000/TCP to minimize the risk of exploitation. Consider implementing additional security measures to limit the ability of authenticated users to read arbitrary files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾