cvedb.io
CVE-2017-2688
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2017-03-29T01:59:01.783 · Last modified 2026-06-17T01:16:40.230

Summary

The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF.

Affected products

siemens — ruggedcom_rox_i

Does this affect you?

Add your gear to cvedb and we'll alert you only when siemens ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.