CVE-2018-13801: Critical severity Siemens Rox Ii Firmware vulnerability
A vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network access to port 22/tcp and valid low-privileged user credentials for the target device could perform a privilege escalation and gain root privileges. Successful exploitation requires user privileges of a low-privileged user but no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13801?
CVE-2018-13801 has a high severity due to the potential for privilege escalation upon successful exploitation.
How do I fix CVE-2018-13801?
To fix CVE-2018-13801, upgrade the Siemens ROX II Firmware to version 2.12.1 or later.
Who is affected by CVE-2018-13801?
CVE-2018-13801 affects all versions of Siemens ROX II Firmware prior to version 2.12.1.
What are the potential impacts of exploiting CVE-2018-13801?
Exploiting CVE-2018-13801 could allow an attacker to gain root privileges, leading to unauthorized control over the affected device.
What access is required to exploit CVE-2018-13801?
Exploitation of CVE-2018-13801 requires network access to port 22/tcp and valid low-privileged user credentials.