CVE-2017-12736

Summary

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.

This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.

Affected Software

VendorProductVersion RangeStatus
SiemensRUGGEDCOM i8000 < V4.3.4affected
SiemensRUGGEDCOM i800NC0 < V4.3.4affected
SiemensRUGGEDCOM i8010 < V4.3.4affected
SiemensRUGGEDCOM i801NC0 < V4.3.4affected
SiemensRUGGEDCOM i8020 < V4.3.4affected
SiemensRUGGEDCOM i802NC0 < V4.3.4affected
SiemensRUGGEDCOM i8030 < V4.3.4affected
SiemensRUGGEDCOM i803NC0 < V4.3.4affected
SiemensRUGGEDCOM M21000 < V4.3.4affected
SiemensRUGGEDCOM M2100NC0 < V4.3.4affected
SiemensRUGGEDCOM M22000 < V4.3.4affected
SiemensRUGGEDCOM M2200NC0 < V4.3.4affected
SiemensRUGGEDCOM M9690 < V4.3.4affected
SiemensRUGGEDCOM M969NC0 < V4.3.4affected
SiemensRUGGEDCOM RMC300 < V4.3.4affected
SiemensRUGGEDCOM RMC30NC0 < V4.3.4affected
SiemensRUGGEDCOM RMC8388 V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RMC8388 V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RMC8388NC V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RMC8388NC V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RP1100 < V4.3.4affected
SiemensRUGGEDCOM RP110NC0 < V4.3.4affected
SiemensRUGGEDCOM RS16000 < V4.3.4affected
SiemensRUGGEDCOM RS1600F0 < V4.3.4affected
SiemensRUGGEDCOM RS1600FNC0 < V4.3.4affected
SiemensRUGGEDCOM RS1600NC0 < V4.3.4affected
SiemensRUGGEDCOM RS1600T0 < V4.3.4affected
SiemensRUGGEDCOM RS1600TNC0 < V4.3.4affected
SiemensRUGGEDCOM RS4000 < V4.3.4affected
SiemensRUGGEDCOM RS400NC0 < V4.3.4affected
SiemensRUGGEDCOM RS4010 < V4.3.4affected
SiemensRUGGEDCOM RS401NC0 < V4.3.4affected
SiemensRUGGEDCOM RS4160 < V4.3.4affected
SiemensRUGGEDCOM RS416NC0 < V4.3.4affected
SiemensRUGGEDCOM RS416NCv2 V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RS416NCv2 V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RS416P0 < V4.3.4affected
SiemensRUGGEDCOM RS416PNC0 < V4.3.4affected
SiemensRUGGEDCOM RS416PNCv2 V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RS416PNCv2 V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RS416Pv2 V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RS416Pv2 V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RS416v2 V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RS416v2 V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RS80000 < V4.3.4affected
SiemensRUGGEDCOM RS8000A0 < V4.3.4affected
SiemensRUGGEDCOM RS8000ANC0 < V4.3.4affected
SiemensRUGGEDCOM RS8000H0 < V4.3.4affected
SiemensRUGGEDCOM RS8000HNC0 < V4.3.4affected
SiemensRUGGEDCOM RS8000NC0 < V4.3.4affected
SiemensRUGGEDCOM RS8000T0 < V4.3.4affected
SiemensRUGGEDCOM RS8000TNC0 < V4.3.4affected
SiemensRUGGEDCOM RS9000 < V4.3.4affected
SiemensRUGGEDCOM RS900 (32M) V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RS900 (32M) V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RS900G0 < V4.3.4affected
SiemensRUGGEDCOM RS900G (32M) V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RS900G (32M) V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RS900GNC0 < V4.3.4affected
SiemensRUGGEDCOM RS900GNC(32M) V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RS900GNC(32M) V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RS900GP0 < V4.3.4affected
SiemensRUGGEDCOM RS900GPNC0 < V4.3.4affected
SiemensRUGGEDCOM RS900L0 < V4.3.4affected
SiemensRUGGEDCOM RS900LNC0 < V4.3.4affected
SiemensRUGGEDCOM RS900M-GETS-C010 < V4.3.4affected
SiemensRUGGEDCOM RS900M-GETS-XX0 < V4.3.4affected
SiemensRUGGEDCOM RS900M-STND-C010 < V4.3.4affected
SiemensRUGGEDCOM RS900M-STND-XX0 < V4.3.4affected
SiemensRUGGEDCOM RS900MNC-GETS-C010 < V4.3.4affected
SiemensRUGGEDCOM RS900MNC-GETS-XX0 < V4.3.4affected
SiemensRUGGEDCOM RS900MNC-STND-XX0 < V4.3.4affected
SiemensRUGGEDCOM RS900MNC-STND-XX-C010 < V4.3.4affected
SiemensRUGGEDCOM RS900NC0 < V4.3.4affected
SiemensRUGGEDCOM RS900NC(32M) V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RS900NC(32M) V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RS900W0 < V4.3.4affected
SiemensRUGGEDCOM RS9100 < V4.3.4affected
SiemensRUGGEDCOM RS910L0 < V4.3.4affected
SiemensRUGGEDCOM RS910LNC0 < V4.3.4affected
SiemensRUGGEDCOM RS910NC0 < V4.3.4affected
SiemensRUGGEDCOM RS910W0 < V4.3.4affected
SiemensRUGGEDCOM RS920L0 < V4.3.4affected
SiemensRUGGEDCOM RS920LNC0 < V4.3.4affected
SiemensRUGGEDCOM RS920W0 < V4.3.4affected
SiemensRUGGEDCOM RS930L0 < V4.3.4affected
SiemensRUGGEDCOM RS930LNC0 < V4.3.4affected
SiemensRUGGEDCOM RS930W0 < V4.3.4affected
SiemensRUGGEDCOM RS940G0 < V4.3.4affected
SiemensRUGGEDCOM RS940GNC0 < V4.3.4affected
SiemensRUGGEDCOM RS9690 < V4.3.4affected
SiemensRUGGEDCOM RS969NC0 < V4.3.4affected
SiemensRUGGEDCOM RSG21000 < V4.3.4affected
SiemensRUGGEDCOM RSG2100 (32M) V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG2100 (32M) V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG2100NC0 < V4.3.4affected
SiemensRUGGEDCOM RSG2100NC(32M) V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG2100NC(32M) V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG2100P0 < V4.3.4affected
SiemensRUGGEDCOM RSG2100P (32M) V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG2100P (32M) V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG2100PNC0 < V4.3.4affected
SiemensRUGGEDCOM RSG2100PNC (32M) V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG2100PNC (32M) V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG22000 < V4.3.4affected
SiemensRUGGEDCOM RSG2200NC0 < V4.3.4affected
SiemensRUGGEDCOM RSG2288 V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG2288 V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG2288NC V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG2288NC V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG2300 V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG2300 V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG2300NC V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG2300NC V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG2300P V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG2300P V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG2300PNC V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG2300PNC V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG2488 V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG2488 V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG2488NC V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG2488NC V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG907R0 < V5.0.1affected
SiemensRUGGEDCOM RSG908C0 < V5.0.1affected
SiemensRUGGEDCOM RSG909R0 < V5.0.1affected
SiemensRUGGEDCOM RSG910C0 < V5.0.1affected
SiemensRUGGEDCOM RSG920P V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG920P V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSG920PNC V4.X0 < V4.3.4affected
SiemensRUGGEDCOM RSG920PNC V5.X0 < V5.0.1affected
SiemensRUGGEDCOM RSL9100 < V5.0.1affected
SiemensRUGGEDCOM RSL910NC0 < V5.0.1affected
SiemensRUGGEDCOM RST22280 < V5.0.1affected
SiemensRUGGEDCOM RST2228P0 < V5.0.1affected
SiemensRUGGEDCOM RST916C0 < V5.0.1affected
SiemensRUGGEDCOM RST916P0 < V5.0.1affected
SiemensSCALANCE XB205-3 (SC, PN)V3.0 < V3.0.2affected
SiemensSCALANCE XB205-3 (ST, E/IP)V3.0 < V3.0.2affected
SiemensSCALANCE XB205-3 (ST, E/IP)V3.0 < V3.0.2affected
SiemensSCALANCE XB205-3 (ST, PN)V3.0 < V3.0.2affected
SiemensSCALANCE XB205-3LD (SC, E/IP)V3.0 < V3.0.2affected
SiemensSCALANCE XB205-3LD (SC, PN)V3.0 < V3.0.2affected
SiemensSCALANCE XB206-2 (SC)V3.0 < V3.0.2affected
SiemensSCALANCE XB206-2 (ST/BFOC)V3.0 < V3.0.2affected
SiemensSCALANCE XB206-2 LDV3.0 < V3.0.2affected
SiemensSCALANCE XB206-2 SCV3.0 < V3.0.2affected
SiemensSCALANCE XB206-2 STV3.0 < V3.0.2affected
SiemensSCALANCE XB206-2LDV3.0 < V3.0.2affected
SiemensSCALANCE XB208 (E/IP)V3.0 < V3.0.2affected
SiemensSCALANCE XB208 (PN)V3.0 < V3.0.2affected
SiemensSCALANCE XB213-3 (SC, E/IP)V3.0 < V3.0.2affected
SiemensSCALANCE XB213-3 (SC, PN)V3.0 < V3.0.2affected
SiemensSCALANCE XB213-3 (ST, E/IP)V3.0 < V3.0.2affected
SiemensSCALANCE XB213-3 (ST, PN)V3.0 < V3.0.2affected
SiemensSCALANCE XB213-3LD (SC, E/IP)V3.0 < V3.0.2affected
SiemensSCALANCE XB213-3LD (SC, PN)V3.0 < V3.0.2affected
SiemensSCALANCE XB216 (E/IP)V3.0 < V3.0.2affected
SiemensSCALANCE XB216 (PN)V3.0 < V3.0.2affected
SiemensSCALANCE XC206-2 (SC)V3.0 < V3.0.2affected
SiemensSCALANCE XC206-2 (ST/BFOC)V3.0 < V3.0.2affected
SiemensSCALANCE XC206-2G PoEV3.0 < V3.0.2affected
SiemensSCALANCE XC206-2G PoE (54 V DC)V3.0 < V3.0.2affected
SiemensSCALANCE XC206-2G PoE EEC (54 V DC)V3.0 < V3.0.2affected
SiemensSCALANCE XC206-2SFPV3.0 < V3.0.2affected
SiemensSCALANCE XC206-2SFP EECV3.0 < V3.0.2affected
SiemensSCALANCE XC206-2SFP GV3.0 < V3.0.2affected
SiemensSCALANCE XC206-2SFP G (EIP DEF.)V3.0 < V3.0.2affected
SiemensSCALANCE XC206-2SFP G EECV3.0 < V3.0.2affected
SiemensSCALANCE XC208V3.0 < V3.0.2affected
SiemensSCALANCE XC208EECV3.0 < V3.0.2affected
SiemensSCALANCE XC208GV3.0 < V3.0.2affected
SiemensSCALANCE XC208G (EIP def.)V3.0 < V3.0.2affected
SiemensSCALANCE XC208G EECV3.0 < V3.0.2affected
SiemensSCALANCE XC208G PoEV3.0 < V3.0.2affected
SiemensSCALANCE XC208G PoE (54 V DC)V3.0 < V3.0.2affected
SiemensSCALANCE XC216V3.0 < V3.0.2affected
SiemensSCALANCE XC216-3G PoEV3.0 < V3.0.2affected
SiemensSCALANCE XC216-3G PoE (54 V DC)V3.0 < V3.0.2affected
SiemensSCALANCE XC216-4CV3.0 < V3.0.2affected
SiemensSCALANCE XC216-4C GV3.0 < V3.0.2affected
SiemensSCALANCE XC216-4C G (EIP Def.)V3.0 < V3.0.2affected
SiemensSCALANCE XC216-4C G EECV3.0 < V3.0.2affected
SiemensSCALANCE XC216EECV3.0 < V3.0.2affected
SiemensSCALANCE XC224V3.0 < V3.0.2affected
SiemensSCALANCE XC224-4C GV3.0 < V3.0.2affected
SiemensSCALANCE XC224-4C G (EIP Def.)V3.0 < V3.0.2affected
SiemensSCALANCE XC224-4C G EECV3.0 < V3.0.2affected
SiemensSCALANCE XF204V3.0 < V3.0.2affected
SiemensSCALANCE XF204 DNAV3.0 < V3.0.2affected
SiemensSCALANCE XF204-2BAV3.0 < V3.0.2affected
SiemensSCALANCE XF204-2BA DNAV3.0 < V3.0.2affected
SiemensSCALANCE XF204GV3.0 < V3.0.2affected
SiemensSCALANCE XM408-4CV6.1.0 < V6.1.1affected
SiemensSCALANCE XM408-4C (L3 int.)V6.1.0 < V6.1.1affected
SiemensSCALANCE XM408-8CV6.1.0 < V6.1.1affected
SiemensSCALANCE XM408-8C (L3 int.)V6.1.0 < V6.1.1affected
SiemensSCALANCE XM416-4CV6.1.0 < V6.1.1affected
SiemensSCALANCE XM416-4C (L3 int.)V6.1.0 < V6.1.1affected
SiemensSCALANCE XP208V3.0 < V3.0.2affected
SiemensSCALANCE XP208V3.0 < V3.0.2affected
SiemensSCALANCE XP208 (Ethernet/IP)V3.0 < V3.0.2affected
SiemensSCALANCE XP208EECV3.0 < V3.0.2affected
SiemensSCALANCE XP208EECV3.0 < V3.0.2affected
SiemensSCALANCE XP208GV3.0 < V3.0.2affected
SiemensSCALANCE XP208G EECV3.0 < V3.0.2affected
SiemensSCALANCE XP208G PoE EECV3.0 < V3.0.2affected
SiemensSCALANCE XP208G PPV3.0 < V3.0.2affected
SiemensSCALANCE XP208PoE EECV3.0 < V3.0.2affected
SiemensSCALANCE XP208PoE EECV3.0 < V3.0.2affected
SiemensSCALANCE XP216V3.0 < V3.0.2affected
SiemensSCALANCE XP216 (Ethernet/IP)V3.0 < V3.0.2affected
SiemensSCALANCE XP216 (V2)V3.0 < V3.0.2affected
SiemensSCALANCE XP216EECV3.0 < V3.0.2affected
SiemensSCALANCE XP216EEC (V2)V3.0 < V3.0.2affected
SiemensSCALANCE XP216GV3.0 < V3.0.2affected
SiemensSCALANCE XP216G EECV3.0 < V3.0.2affected
SiemensSCALANCE XP216G PoE EECV3.0 < V3.0.2affected
SiemensSCALANCE XP216POE EECV3.0 < V3.0.2affected
SiemensSCALANCE XP216PoE EEC (V2)V3.0 < V3.0.2affected
SiemensSCALANCE XR324WG (24 x FE, AC 230V)V3.0 < V3.0.2affected
SiemensSCALANCE XR324WG (24 X FE, DC 24V)V3.0 < V3.0.2affected
SiemensSCALANCE XR326-2C PoE WGV3.0 < V3.0.2affected
SiemensSCALANCE XR326-2C PoE WG (without UL)V3.0 < V3.0.2affected
SiemensSCALANCE XR328-4C WG (24XFE, 4XGE, 24V)V3.0 < V3.0.2affected
SiemensSCALANCE XR328-4C WG (24xFE, 4xGE,DC24V)V3.0 < V3.0.2affected
SiemensSCALANCE XR328-4C WG (24xFE,4xGE,AC230V)V3.0 < V3.0.2affected
SiemensSCALANCE XR328-4C WG (24xFE,4xGE,AC230V)V3.0 < V3.0.2affected
SiemensSCALANCE XR328-4C WG (28xGE, AC 230V)V3.0 < V3.0.2affected
SiemensSCALANCE XR328-4C WG (28xGE, DC 24V)V3.0 < V3.0.2affected
SiemensSCALANCE XR524-8C, 1x230VV6.1.0 < V6.1.1affected
SiemensSCALANCE XR524-8C, 1x230V (L3 int.)V6.1.0 < V6.1.1affected
SiemensSCALANCE XR524-8C, 24VV6.1.0 < V6.1.1affected
SiemensSCALANCE XR524-8C, 24V (L3 int.)V6.1.0 < V6.1.1affected
SiemensSCALANCE XR524-8C, 2x230VV6.1.0 < V6.1.1affected
SiemensSCALANCE XR524-8C, 2x230V (L3 int.)V6.1.0 < V6.1.1affected
SiemensSCALANCE XR526-8C, 1x230VV6.1.0 < V6.1.1affected
SiemensSCALANCE XR526-8C, 1x230V (L3 int.)V6.1.0 < V6.1.1affected
SiemensSCALANCE XR526-8C, 24VV6.1.0 < V6.1.1affected
SiemensSCALANCE XR526-8C, 24V (L3 int.)V6.1.0 < V6.1.1affected
SiemensSCALANCE XR526-8C, 2x230VV6.1.0 < V6.1.1affected
SiemensSCALANCE XR526-8C, 2x230V (L3 int.)V6.1.0 < V6.1.1affected
SiemensSCALANCE XR528-6MV6.1.0 < V6.1.1affected
SiemensSCALANCE XR528-6M (2HR2, L3 int.)V6.1.0 < V6.1.1affected
SiemensSCALANCE XR528-6M (2HR2)V6.1.0 < V6.1.1affected
SiemensSCALANCE XR528-6M (L3 int.)V6.1.0 < V6.1.1affected
SiemensSCALANCE XR552-12MV6.1.0 < V6.1.1affected
SiemensSCALANCE XR552-12M (2HR2, L3 int.)V6.1.0 < V6.1.1affected
SiemensSCALANCE XR552-12M (2HR2)V6.1.0 < V6.1.1affected
SiemensSCALANCE XR552-12M (2HR2)V6.1.0 < V6.1.1affected
SiemensSIPLUS NET SCALANCE XC206-2V3.0 < V3.0.2affected
SiemensSIPLUS NET SCALANCE XC206-2SFPV3.0 < V3.0.2affected
SiemensSIPLUS NET SCALANCE XC208V3.0 < V3.0.2affected
SiemensSIPLUS NET SCALANCE XC216-4CV3.0 < V3.0.2affected

Weaknesses

  • CWE-1188: CWE-1188: Initialization of a Resource with an Insecure Default

ADP Enrichment

CVE Program Container

Additional References

References