CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 99510 | CVE-2017-2690 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20161201) | None (candidate not yet proposed) | View | |
| 99509 | CVE-2017-2689 | Candidate | Siemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or change configuration settings. | Assigned (20161201) | None (candidate not yet proposed) | View | |
| 99508 | CVE-2017-2688 | Candidate | The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF. | Assigned (20161201) | None (candidate not yet proposed) | View | |
| 99507 | CVE-2017-2687 | Candidate | Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induced to click on a malicious link. | Assigned (20161201) | None (candidate not yet proposed) | View | |
| 99506 | CVE-2017-2686 | Candidate | Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive information. | Assigned (20161201) | None (candidate not yet proposed) | View |
Page 1042 of 20943, showing 5 records out of 104715 total, starting on record 5206, ending on 5210
