CVE-2018-13802: Critical severity Siemens Rox Ii Firmware vulnerability
A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privileged user account access via SSH could circumvent restrictions in place and execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the SSH interface in on port 22/tcp. The attacker must be authenticated to exploit the vulnerability. The vulnerability could allow an attacker to execute arbitrary code on the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13802?
CVE-2018-13802 is considered a high-severity vulnerability due to the potential for arbitrary command execution by an authenticated attacker.
How do I fix CVE-2018-13802?
To remediate CVE-2018-13802, upgrade ROX II to version 2.12.1 or later.
What types of accounts are affected by CVE-2018-13802?
CVE-2018-13802 affects high-privileged user accounts that can access the system via SSH.
What could an attacker do by exploiting CVE-2018-13802?
An attacker exploiting CVE-2018-13802 could execute arbitrary operating system commands on the affected system.
What versions of ROX II are vulnerable to CVE-2018-13802?
All versions of ROX II prior to version 2.12.1 are vulnerable to CVE-2018-13802.