PT-2017-15473

CVE-2017-2686

·

Published

2017-03-29

·

Updated

2017-07-12

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROX I (all versions)
Description The issue allows an authenticated user to read arbitrary files through the web interface at port 10000/TCP, potentially accessing sensitive information.
Recommendations For all versions, restrict access to the web interface at port 10000/TCP to minimize the risk of exploitation. Consider implementing additional security measures to limit the ability of authenticated users to read arbitrary files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾