Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2017-12736

Quick assessment

Affected
Siemens RUGGEDCOM i800
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Siemens RUGGEDCOM ROS等都是德国西门子（Siemens）公司的产品。Siemens RuggedCom ROS是一套用于RuggedCom系列交换机中的操作系统。SCALANCE XR300-WG是一款以太网交换机产品。 多款Siemens产品存在远程安全绕过漏洞。远程攻击者可利用该漏洞绕过安全限制，执行未授权的操作。以下产品和版本受到影响：Siemens RUGGEDCOM ROS 5.0.1之前的版本（用于RSL910设备），RUGGEDCOM ROS 4.3.4之前的版本（用于其

CVSS 8.8 · High EPSS 1.07% · P65
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2017-12736

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不安全的默认资源初始化
Source: CVE Program / CVE List V5
Vulnerability Title
多款Siemens产品安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens RUGGEDCOM ROS等都是德国西门子（Siemens）公司的产品。Siemens RuggedCom ROS是一套用于RuggedCom系列交换机中的操作系统。SCALANCE XR300-WG是一款以太网交换机产品。 多款Siemens产品存在远程安全绕过漏洞。远程攻击者可利用该漏洞绕过安全限制，执行未授权的操作。以下产品和版本受到影响：Siemens RUGGEDCOM ROS 5.0.1之前的版本（用于RSL910设备），RUGGEDCOM ROS 4.3.4之前的版本（用于其
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Siemens RUGGEDCOM i800 0 ~ V4.3.4 -
Siemens RUGGEDCOM i800NC 0 ~ V4.3.4 -
Siemens RUGGEDCOM i801 0 ~ V4.3.4 -
Siemens RUGGEDCOM i801NC 0 ~ V4.3.4 -
Siemens RUGGEDCOM i802 0 ~ V4.3.4 -
Siemens RUGGEDCOM i802NC 0 ~ V4.3.4 -
Siemens RUGGEDCOM i803 0 ~ V4.3.4 -
Siemens RUGGEDCOM i803NC 0 ~ V4.3.4 -
Siemens RUGGEDCOM M2100 0 ~ V4.3.4 -
Siemens RUGGEDCOM M2100NC 0 ~ V4.3.4 -
Siemens RUGGEDCOM M2200 0 ~ V4.3.4 -
Siemens RUGGEDCOM M2200NC 0 ~ V4.3.4 -
Siemens RUGGEDCOM M969 0 ~ V4.3.4 -
Siemens RUGGEDCOM M969NC 0 ~ V4.3.4 -
Siemens RUGGEDCOM RMC30 0 ~ V4.3.4 -
Siemens RUGGEDCOM RMC30NC 0 ~ V4.3.4 -
Siemens RUGGEDCOM RMC8388 V4.X 0 ~ V4.3.4 -
Siemens RUGGEDCOM RMC8388 V5.X 0 ~ V5.0.1 -
Siemens RUGGEDCOM RMC8388NC V4.X 0 ~ V4.3.4 -
Siemens RUGGEDCOM RMC8388NC V5.X 0 ~ V5.0.1 -
Siemens RUGGEDCOM RP110 0 ~ V4.3.4 -
Siemens RUGGEDCOM RP110NC 0 ~ V4.3.4 -
Siemens RUGGEDCOM RS1600 0 ~ V4.3.4 -
Siemens RUGGEDCOM RS1600F 0 ~ V4.3.4 -
Siemens RUGGEDCOM RS1600FNC 0 ~ V4.3.4 -
Siemens RUGGEDCOM RS1600NC 0 ~ V4.3.4 -
Siemens RUGGEDCOM RS1600T 0 ~ V4.3.4 -
Siemens RUGGEDCOM RS1600TNC 0 ~ V4.3.4 -
Siemens RUGGEDCOM RS400 0 ~ V4.3.4 -
Siemens RUGGEDCOM RS400NC 0 ~ V4.3.4 -

II. Public POCs for CVE-2017-12736

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-12736

请登录查看更多情报信息。

Vendor Advisories for CVE-2017-12736 (3)

Other References for CVE-2017-12736 (1)

IV. Related Vulnerabilities

Same product: RUGGEDCOM i800
Same vendor: Siemens
Same weakness: CWE-1188