After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.
| Type | CWE ID | Description |
|---|---|---|
| CWE | CWE-1188 | CWE-1188: Initialization of a Resource with an Insecure Default |
| Version | Base score | Base severity | Vector |
|---|---|---|---|
| 3.1 | 8.8 | HIGH | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf | x_refsource_CONFIRM |
| http://www.securitytracker.com/id/1039463 | vdb-entry x_refsource_SECTRACK |
| http://www.securitytracker.com/id/1039464 | vdb-entry x_refsource_SECTRACK |
| http://www.securityfocus.com/bid/101041 | vdb-entry x_refsource_BID |
| https://cert-portal.siemens.com/productcert/html/ssa-856721.html | N/A |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf | x_refsource_CONFIRM x_transferred |
| http://www.securitytracker.com/id/1039463 | vdb-entry x_refsource_SECTRACK x_transferred |
| http://www.securitytracker.com/id/1039464 | vdb-entry x_refsource_SECTRACK x_transferred |
| http://www.securityfocus.com/bid/101041 | vdb-entry x_refsource_BID x_transferred |