CVE-2017-2688CWE-352

The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an…

published March 29, 2017

CVSS
—
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01115 · 65.6th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2017-03-29T01:00Z
EPSS history
Timeline
  • 29 MAR 01:00Z
    The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an…
    cvelistv5