cvedb.io
CVE-2018-13801
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2018-10-10T17:29:03.827 · Last modified 2026-06-17T01:40:11.703

Summary

A vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network access to port 22/tcp and valid low-privileged user credentials for the target device could perform a privilege escalation and gain root privileges. Successful exploitation requires user privileges of a low-privileged user but no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system.

Affected products

siemens — rox_ii_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when siemens ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.