Siemens Rox Ii Firmware vulnerabilities

2 CVEs affecting Siemens Rox Ii Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-13802, published 2018-10-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-13802, published 2018-10-10. High severity, CVSS 7.2. EPSS: 3.6% chance of exploitation in the next 30 days. A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privileged user account access via SSH could circumvent restrictions in place and execute…
CVE-2018-13801, published 2018-10-10. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. A vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network access to port 22/tcp and valid low-privileged user credentials for the target device could perform a…