NVD

Id
83703  
Name
CVE-2017-2688  
Description
The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-03-28  
Modified Date
2017-07-11  
Seq
2017-2688  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408147 83703 CVE-2016-9216 95629  View
408148 83703 CVE-2016-9216 1037652  View
408149 83703 CVE-2016-9216 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-asr  View
411539 83703 CVE-2017-5235 96548  View
411540 83703 CVE-2017-5235 https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66384 JVNDB-2017-002722 Siemens RUGGEDCOM ROX I のポート 10000/TCP の統合 Web サーバにおけるクロスサイトリクエストフォージェリの脆弱性 Siemens RUGGEDCOM ROX I のポート 10000/TCP の統合 Web サーバには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2017-2688 0 CVE-2017-2688 83703 6.8 8.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002722.html 2017-03-28 2017-04-26 View