CVE-2018-13802
N/A
N/A
Summary
A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privileged user account access via SSH could circumvent restrictions in place and execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the SSH interface in on port 22/tcp. The attacker must be authenticated to exploit the vulnerability. The vulnerability could allow an attacker to execute arbitrary code on the device.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Siemens AG | ROX II | All versions < V2.12.1 | affected |
Weaknesses
- CWE-264: CWE-264: Permissions, Privileges, and Access Controls
ADP Enrichment
CVE Program Container
Additional References
- https://ics-cert.us-cert.gov/advisories/ICSA-18-282-03
- https://cert-portal.siemens.com/productcert/pdf/ssa-493830.pdf
- http://www.securityfocus.com/bid/105545
References
- https://ics-cert.us-cert.gov/advisories/ICSA-18-282-03
- https://cert-portal.siemens.com/productcert/pdf/ssa-493830.pdf
- http://www.securityfocus.com/bid/105545
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.