← Vulnerability feed

Vulnerability record · CVE-2017-12736 · published 26 December 2017

CVE-2017-12736: Siemens scalance xb-200 firmware insecure default initialization vulnerability

Siemens · Scalance Xb 200 Firmware

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.

8.8 CVSS 3.1 High EPSS 1.1% · top 36.6% CWE-1188 · Insecure default initializationCWE-665 · CWE-665
8.8CVSS 3.1 base score, v2 5.8
1.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
7Affected product versions listed by NVD
9References
17 Jun 2026Last modified by NVD

Description

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

7 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/101041 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039463 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039464 Third Party AdvisoryVDB Entry
https://cert-portal.siemens.com/productcert/html/ssa-856721.html
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf Issue TrackingMitigationVendor Advisory
http://www.securityfocus.com/bid/101041 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039463 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039464 Third Party AdvisoryVDB Entry
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf Issue TrackingMitigationVendor Advisory

Track CVE-2017-12736 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-24845Siemens ruggedcom ros vulnerabilityA vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCO…EPSS 0.69%9.6CVE-2021-37208Siemens ruggedcom ros cross-site scripting vulnerabilityA vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCO…EPSS 0.53%9.1CVE-2022-36323Siemens scalance m-800 firmware injection vulnerabilityAffected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject …EPSS 1.7%9.1CVE-2019-6569Siemens scalance x-200 firmware vulnerabilityThe monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attac…EPSS 1.3%8.8CVE-2021-25667Siemens ruggedcom rm1224 firmware stack-based buffer overflow vulnerabilityA vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE…EPSS 0.86%8.7CVE-2020-28400Siemens dk standard ethernet controller evaluation kit firmware allocation without limits vulnerabilityAffected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be t…EPSS 1.9%8.0CVE-2022-34663Siemens ruggedcom ros code injection vulnerabilityA vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCO…EPSS 0.91%7.5CVE-2023-39269Siemens ruggedcom ros allocation without limits vulnerabilityA vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCO…EPSS 0.64%

Source: NIST National Vulnerability Database (record CVE-2017-12736), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.