CVE-2017-12736CWE-1188

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions

High · published December 26, 2017

CVSS v3.1
8.8
EPSS
1%
Percentile
64.3
In the wild
Unconfirmed
What it is

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.

This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01066 · 64.3th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2017-12-26T04:00Z
EPSS history
Timeline
  • 26 DEC 04:00Z
    After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions
    cvelistv5