CVE-2017-12736

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1188CWE-665

Affected software

VendorProductVersions
SiemensRUGGEDCOM i800< V4.3.4
SiemensRUGGEDCOM i800NC< V4.3.4
SiemensRUGGEDCOM i801< V4.3.4
SiemensRUGGEDCOM i801NC< V4.3.4
SiemensRUGGEDCOM i802< V4.3.4
SiemensRUGGEDCOM i802NC< V4.3.4
SiemensRUGGEDCOM i803< V4.3.4
SiemensRUGGEDCOM i803NC< V4.3.4
SiemensRUGGEDCOM M2100< V4.3.4
SiemensRUGGEDCOM M2100NC< V4.3.4
SiemensRUGGEDCOM M2200< V4.3.4
SiemensRUGGEDCOM M2200NC< V4.3.4
SiemensRUGGEDCOM M969< V4.3.4
SiemensRUGGEDCOM M969NC< V4.3.4
SiemensRUGGEDCOM RMC30< V4.3.4
SiemensRUGGEDCOM RMC30NC< V4.3.4
SiemensRUGGEDCOM RMC8388 V4.X< V4.3.4
SiemensRUGGEDCOM RMC8388 V5.X< V5.0.1
SiemensRUGGEDCOM RMC8388NC V4.X< V4.3.4
SiemensRUGGEDCOM RMC8388NC V5.X< V5.0.1
SiemensRUGGEDCOM RP110< V4.3.4
SiemensRUGGEDCOM RP110NC< V4.3.4
SiemensRUGGEDCOM RS1600< V4.3.4
SiemensRUGGEDCOM RS1600F< V4.3.4
SiemensRUGGEDCOM RS1600FNC< V4.3.4
SiemensRUGGEDCOM RS1600NC< V4.3.4
SiemensRUGGEDCOM RS1600T< V4.3.4
SiemensRUGGEDCOM RS1600TNC< V4.3.4
SiemensRUGGEDCOM RS400< V4.3.4
SiemensRUGGEDCOM RS400NC< V4.3.4
SiemensRUGGEDCOM RS401< V4.3.4
SiemensRUGGEDCOM RS401NC< V4.3.4
SiemensRUGGEDCOM RS416< V4.3.4
SiemensRUGGEDCOM RS416NC< V4.3.4
SiemensRUGGEDCOM RS416NCv2 V4.X< V4.3.4
SiemensRUGGEDCOM RS416NCv2 V5.X< V5.0.1
SiemensRUGGEDCOM RS416P< V4.3.4
SiemensRUGGEDCOM RS416PNC< V4.3.4
SiemensRUGGEDCOM RS416PNCv2 V4.X< V4.3.4
SiemensRUGGEDCOM RS416PNCv2 V5.X< V5.0.1
SiemensRUGGEDCOM RS416Pv2 V4.X< V4.3.4
SiemensRUGGEDCOM RS416Pv2 V5.X< V5.0.1
SiemensRUGGEDCOM RS416v2 V4.X< V4.3.4
SiemensRUGGEDCOM RS416v2 V5.X< V5.0.1
SiemensRUGGEDCOM RS8000< V4.3.4
SiemensRUGGEDCOM RS8000A< V4.3.4
SiemensRUGGEDCOM RS8000ANC< V4.3.4
SiemensRUGGEDCOM RS8000H< V4.3.4
SiemensRUGGEDCOM RS8000HNC< V4.3.4
SiemensRUGGEDCOM RS8000NC< V4.3.4

References

Timeline

Published
Dec 26, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-127375.3An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi0CVE-2017-127386.1An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi0CVE-2017-127399.8An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi0CVE-2017-12748.8IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated attacker to execute CVE-2017-127405.9Siemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software packages downloaded via an unprotected communCVE-2017-127417.5Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.CVE-2017-12755.4IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cCVE-2017-127548.8Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC530CVE-2017-127567.2Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter.CVE-2017-127579.8Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business NetworkinCVE-2017-127589.8https://www.joomlaextensions.co.in/ Joomla! Component Appointment 1.1 is affected by: SQL Injection. The impact is: Code execution (remote).CVE-2017-127599.8Ynet Interactive - http://demo.ynetinteractive.com/soa/ SOA School Management 3.0 is affected by: SQL Injection. The impact is: Code executi
CVE-2017-12736: High severity, CVSS 8.8 | Vulnix