Описание
The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended restrictions on administrative actions by leveraging access to a (1) guest or (2) operator account.
Ссылки
- Third Party AdvisoryUS Government Resource
- Broken LinkVendor Advisory
- Third Party AdvisoryUS Government Resource
- Broken LinkVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.12.2 (исключая)
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:*:*:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.00265
Низкий
8 High
CVSS2
Дефекты
CWE-863
Связанные уязвимости
github
больше 3 лет назад
The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended restrictions on administrative actions by leveraging access to a (1) guest or (2) operator account.
EPSS
Процентиль: 50%
0.00265
Низкий
8 High
CVSS2
Дефекты
CWE-863