CVE-2017-12736
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This…
- Published
- Updated
- Reserved
- Assigned by
- siemens
Description
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| siemensCNA (assigner) | 3.1 | High8.8 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High8.8 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 1.1% · top 35% of all CVEs (4 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.
Weakness
Affected products
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
Siemens · RUGGEDCOM RMC8388 V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RMC8388 V5.X
- affected < V5.0.1
Siemens · RUGGEDCOM RMC8388NC V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RMC8388NC V5.X
- affected < V5.0.1
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
Siemens · RUGGEDCOM RS416NCv2 V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RS416NCv2 V5.X
- affected < V5.0.1
- affected < V4.3.4
- affected < V4.3.4
Siemens · RUGGEDCOM RS416PNCv2 V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RS416PNCv2 V5.X
- affected < V5.0.1
Siemens · RUGGEDCOM RS416Pv2 V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RS416Pv2 V5.X
- affected < V5.0.1
Siemens · RUGGEDCOM RS416v2 V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RS416v2 V5.X
- affected < V5.0.1
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
Siemens · RUGGEDCOM RS900 (32M) V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RS900 (32M) V5.X
- affected < V5.0.1
- affected < V4.3.4
Siemens · RUGGEDCOM RS900G (32M) V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RS900G (32M) V5.X
- affected < V5.0.1
- affected < V4.3.4
Siemens · RUGGEDCOM RS900GNC(32M) V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RS900GNC(32M) V5.X
- affected < V5.0.1
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
Siemens · RUGGEDCOM RS900M-GETS-C01
- affected < V4.3.4
Siemens · RUGGEDCOM RS900M-GETS-XX
- affected < V4.3.4
Siemens · RUGGEDCOM RS900M-STND-C01
- affected < V4.3.4
Siemens · RUGGEDCOM RS900M-STND-XX
- affected < V4.3.4
Siemens · RUGGEDCOM RS900MNC-GETS-C01
- affected < V4.3.4
Siemens · RUGGEDCOM RS900MNC-GETS-XX
- affected < V4.3.4
Siemens · RUGGEDCOM RS900MNC-STND-XX
- affected < V4.3.4
Siemens · RUGGEDCOM RS900MNC-STND-XX-C01
- affected < V4.3.4
- affected < V4.3.4
Siemens · RUGGEDCOM RS900NC(32M) V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RS900NC(32M) V5.X
- affected < V5.0.1
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2100 (32M) V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2100 (32M) V5.X
- affected < V5.0.1
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2100NC(32M) V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2100NC(32M) V5.X
- affected < V5.0.1
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2100P (32M) V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2100P (32M) V5.X
- affected < V5.0.1
Siemens · RUGGEDCOM RSG2100PNC
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2100PNC (32M) V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2100PNC (32M) V5.X
- affected < V5.0.1
- affected < V4.3.4
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2288 V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2288 V5.X
- affected < V5.0.1
Siemens · RUGGEDCOM RSG2288NC V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2288NC V5.X
- affected < V5.0.1
Siemens · RUGGEDCOM RSG2300 V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2300 V5.X
- affected < V5.0.1
Siemens · RUGGEDCOM RSG2300NC V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2300NC V5.X
- affected < V5.0.1
Siemens · RUGGEDCOM RSG2300P V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2300P V5.X
- affected < V5.0.1
Siemens · RUGGEDCOM RSG2300PNC V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2300PNC V5.X
- affected < V5.0.1
Siemens · RUGGEDCOM RSG2488 V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2488 V5.X
- affected < V5.0.1
Siemens · RUGGEDCOM RSG2488NC V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG2488NC V5.X
- affected < V5.0.1
- affected < V5.0.1
- affected < V5.0.1
- affected < V5.0.1
- affected < V5.0.1
Siemens · RUGGEDCOM RSG920P V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG920P V5.X
- affected < V5.0.1
Siemens · RUGGEDCOM RSG920PNC V4.X
- affected < V4.3.4
Siemens · RUGGEDCOM RSG920PNC V5.X
- affected < V5.0.1
- affected < V5.0.1
- affected < V5.0.1
- affected < V5.0.1
- affected < V5.0.1
- affected < V5.0.1
- affected < V5.0.1
Siemens · SCALANCE XB205-3 (SC, PN)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB205-3 (ST, E/IP)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB205-3 (ST, E/IP)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB205-3 (ST, PN)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB205-3LD (SC, E/IP)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB205-3LD (SC, PN)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB206-2 (SC)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB206-2 (ST/BFOC)
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB208 (E/IP)
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB213-3 (SC, E/IP)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB213-3 (SC, PN)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB213-3 (ST, E/IP)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB213-3 (ST, PN)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB213-3LD (SC, E/IP)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB213-3LD (SC, PN)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XB216 (E/IP)
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC206-2 (SC)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC206-2 (ST/BFOC)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC206-2G PoE
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC206-2G PoE (54 V DC)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC206-2G PoE EEC (54 V DC)
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC206-2SFP EEC
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC206-2SFP G
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC206-2SFP G (EIP DEF.)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC206-2SFP G EEC
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC208G (EIP def.)
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC208G PoE (54 V DC)
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC216-3G PoE
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC216-3G PoE (54 V DC)
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC216-4C G (EIP Def.)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC216-4C G EEC
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC224-4C G (EIP Def.)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XC224-4C G EEC
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XF204-2BA DNA
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XM408-4C (L3 int.)
- affected V6.1.0 – < V6.1.1
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XM408-8C (L3 int.)
- affected V6.1.0 – < V6.1.1
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XM416-4C (L3 int.)
- affected V6.1.0 – < V6.1.1
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XP208 (Ethernet/IP)
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XP208G PoE EEC
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XP208PoE EEC
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XP208PoE EEC
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XP216 (Ethernet/IP)
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XP216EEC (V2)
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XP216G PoE EEC
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XP216POE EEC
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XP216PoE EEC (V2)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XR324WG (24 x FE, AC 230V)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XR324WG (24 X FE, DC 24V)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XR326-2C PoE WG
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XR326-2C PoE WG (without UL)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XR328-4C WG (24XFE, 4XGE, 24V)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XR328-4C WG (28xGE, AC 230V)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XR328-4C WG (28xGE, DC 24V)
- affected V3.0 – < V3.0.2
Siemens · SCALANCE XR524-8C, 1x230V
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR524-8C, 1x230V (L3 int.)
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR524-8C, 24V
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR524-8C, 24V (L3 int.)
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR524-8C, 2x230V
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR524-8C, 2x230V (L3 int.)
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR526-8C, 1x230V
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR526-8C, 1x230V (L3 int.)
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR526-8C, 24V
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR526-8C, 24V (L3 int.)
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR526-8C, 2x230V
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR526-8C, 2x230V (L3 int.)
- affected V6.1.0 – < V6.1.1
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR528-6M (2HR2, L3 int.)
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR528-6M (2HR2)
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR528-6M (L3 int.)
- affected V6.1.0 – < V6.1.1
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR552-12M (2HR2, L3 int.)
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR552-12M (2HR2)
- affected V6.1.0 – < V6.1.1
Siemens · SCALANCE XR552-12M (2HR2)
- affected V6.1.0 – < V6.1.1
Siemens · SIPLUS NET SCALANCE XC206-2
- affected V3.0 – < V3.0.2
Siemens · SIPLUS NET SCALANCE XC206-2SFP
- affected V3.0 – < V3.0.2
Siemens · SIPLUS NET SCALANCE XC208
- affected V3.0 – < V3.0.2
Siemens · SIPLUS NET SCALANCE XC216-4C
- affected V3.0 – < V3.0.2
References (5)
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf (opens in a new tab)x_refsource_CONFIRMx_transferred
- 1039463 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- 1039464 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- 101041 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- https://cert-portal.siemens.com/productcert/html/ssa-856721.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2017-12736)Record last updated .