Siemens Ruggedcom Rox I vulnerabilities

5 CVEs affecting Siemens Ruggedcom Rox I, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-6864, published 2017-03-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-2689, published 2017-03-29. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. Siemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or change configuration…
CVE-2017-2686, published 2017-03-29. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive…
CVE-2017-2688, published 2017-03-29. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the…
CVE-2017-2687, published 2017-03-29. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is…
CVE-2017-6864, published 2017-03-29. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow an authenticated user to perform stored Cross-Site Scripting attacks.