CVSS 3.1
8.8 highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2017-12736
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.
This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-1188, CWE-665
- Published
- Modified
- Record from
- the NVD, synced
Affected
- siemens:ruggedcom_ros
- siemens:scalance_xb-200_firmware
- siemens:scalance_xc-200_firmware
- siemens:scalance_xm-400_firmware
- siemens:scalance_xp-200_firmware
- siemens:scalance_xr-500_firmware
- siemens:scalance_xr300-wg_firmware