CVE-2017-12736

State: Published
Severity: 8.8 High
Published: Dec 26, 2017
Updated: Aug 12, 2025
Reserved: Aug 9, 2017

Description

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.

This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	siemens

Weaknesses

CWE-1188 Initialization of a Resource with an Insecure Default

Affected Products

Product	Versions
RUGGEDCOM i800Siemens	before V4.3.4Affected
RUGGEDCOM i800NCSiemens	before V4.3.4Affected
RUGGEDCOM i801Siemens	before V4.3.4Affected
RUGGEDCOM i801NCSiemens	before V4.3.4Affected
RUGGEDCOM i802Siemens	before V4.3.4Affected
RUGGEDCOM i802NCSiemens	before V4.3.4Affected
RUGGEDCOM i803Siemens	before V4.3.4Affected
RUGGEDCOM i803NCSiemens	before V4.3.4Affected
RUGGEDCOM M2100Siemens	before V4.3.4Affected
RUGGEDCOM M2100NCSiemens	before V4.3.4Affected
RUGGEDCOM M2200Siemens	before V4.3.4Affected
RUGGEDCOM M2200NCSiemens	before V4.3.4Affected
RUGGEDCOM M969Siemens	before V4.3.4Affected
RUGGEDCOM M969NCSiemens	before V4.3.4Affected
RUGGEDCOM RMC30Siemens	before V4.3.4Affected
RUGGEDCOM RMC30NCSiemens	before V4.3.4Affected
RUGGEDCOM RMC8388 V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RMC8388 V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RMC8388NC V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RMC8388NC V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RP110Siemens	before V4.3.4Affected
RUGGEDCOM RP110NCSiemens	before V4.3.4Affected
RUGGEDCOM RS1600Siemens	before V4.3.4Affected
RUGGEDCOM RS1600FSiemens	before V4.3.4Affected
RUGGEDCOM RS1600FNCSiemens	before V4.3.4Affected
RUGGEDCOM RS1600NCSiemens	before V4.3.4Affected
RUGGEDCOM RS1600TSiemens	before V4.3.4Affected
RUGGEDCOM RS1600TNCSiemens	before V4.3.4Affected
RUGGEDCOM RS400Siemens	before V4.3.4Affected
RUGGEDCOM RS400NCSiemens	before V4.3.4Affected
RUGGEDCOM RS401Siemens	before V4.3.4Affected
RUGGEDCOM RS401NCSiemens	before V4.3.4Affected
RUGGEDCOM RS416Siemens	before V4.3.4Affected
RUGGEDCOM RS416NCSiemens	before V4.3.4Affected
RUGGEDCOM RS416NCv2 V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RS416NCv2 V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RS416PSiemens	before V4.3.4Affected
RUGGEDCOM RS416PNCSiemens	before V4.3.4Affected
RUGGEDCOM RS416PNCv2 V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RS416PNCv2 V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RS416Pv2 V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RS416Pv2 V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RS416v2 V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RS416v2 V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RS8000Siemens	before V4.3.4Affected
RUGGEDCOM RS8000ASiemens	before V4.3.4Affected
RUGGEDCOM RS8000ANCSiemens	before V4.3.4Affected
RUGGEDCOM RS8000HSiemens	before V4.3.4Affected
RUGGEDCOM RS8000HNCSiemens	before V4.3.4Affected
RUGGEDCOM RS8000NCSiemens	before V4.3.4Affected
RUGGEDCOM RS8000TSiemens	before V4.3.4Affected
RUGGEDCOM RS8000TNCSiemens	before V4.3.4Affected
RUGGEDCOM RS900Siemens	before V4.3.4Affected
RUGGEDCOM RS900 (32M) V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RS900 (32M) V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RS900GSiemens	before V4.3.4Affected
RUGGEDCOM RS900G (32M) V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RS900G (32M) V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RS900GNCSiemens	before V4.3.4Affected
RUGGEDCOM RS900GNC(32M) V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RS900GNC(32M) V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RS900GPSiemens	before V4.3.4Affected
RUGGEDCOM RS900GPNCSiemens	before V4.3.4Affected
RUGGEDCOM RS900LSiemens	before V4.3.4Affected
RUGGEDCOM RS900LNCSiemens	before V4.3.4Affected
RUGGEDCOM RS900M-GETS-C01Siemens	before V4.3.4Affected
RUGGEDCOM RS900M-GETS-XXSiemens	before V4.3.4Affected
RUGGEDCOM RS900M-STND-C01Siemens	before V4.3.4Affected
RUGGEDCOM RS900M-STND-XXSiemens	before V4.3.4Affected
RUGGEDCOM RS900MNC-GETS-C01Siemens	before V4.3.4Affected
RUGGEDCOM RS900MNC-GETS-XXSiemens	before V4.3.4Affected
RUGGEDCOM RS900MNC-STND-XXSiemens	before V4.3.4Affected
RUGGEDCOM RS900MNC-STND-XX-C01Siemens	before V4.3.4Affected
RUGGEDCOM RS900NCSiemens	before V4.3.4Affected
RUGGEDCOM RS900NC(32M) V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RS900NC(32M) V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RS900WSiemens	before V4.3.4Affected
RUGGEDCOM RS910Siemens	before V4.3.4Affected
RUGGEDCOM RS910LSiemens	before V4.3.4Affected
RUGGEDCOM RS910LNCSiemens	before V4.3.4Affected
RUGGEDCOM RS910NCSiemens	before V4.3.4Affected
RUGGEDCOM RS910WSiemens	before V4.3.4Affected
RUGGEDCOM RS920LSiemens	before V4.3.4Affected
RUGGEDCOM RS920LNCSiemens	before V4.3.4Affected
RUGGEDCOM RS920WSiemens	before V4.3.4Affected
RUGGEDCOM RS930LSiemens	before V4.3.4Affected
RUGGEDCOM RS930LNCSiemens	before V4.3.4Affected
RUGGEDCOM RS930WSiemens	before V4.3.4Affected
RUGGEDCOM RS940GSiemens	before V4.3.4Affected
RUGGEDCOM RS940GNCSiemens	before V4.3.4Affected
RUGGEDCOM RS969Siemens	before V4.3.4Affected
RUGGEDCOM RS969NCSiemens	before V4.3.4Affected
RUGGEDCOM RSG2100Siemens	before V4.3.4Affected
RUGGEDCOM RSG2100 (32M) V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG2100 (32M) V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG2100NCSiemens	before V4.3.4Affected
RUGGEDCOM RSG2100NC(32M) V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG2100NC(32M) V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG2100PSiemens	before V4.3.4Affected
RUGGEDCOM RSG2100P (32M) V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG2100P (32M) V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG2100PNCSiemens	before V4.3.4Affected
RUGGEDCOM RSG2100PNC (32M) V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG2100PNC (32M) V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG2200Siemens	before V4.3.4Affected
RUGGEDCOM RSG2200NCSiemens	before V4.3.4Affected
RUGGEDCOM RSG2288 V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG2288 V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG2288NC V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG2288NC V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG2300 V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG2300 V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG2300NC V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG2300NC V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG2300P V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG2300P V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG2300PNC V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG2300PNC V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG2488 V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG2488 V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG2488NC V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG2488NC V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG907RSiemens	before V5.0.1Affected
RUGGEDCOM RSG908CSiemens	before V5.0.1Affected
RUGGEDCOM RSG909RSiemens	before V5.0.1Affected
RUGGEDCOM RSG910CSiemens	before V5.0.1Affected
RUGGEDCOM RSG920P V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG920P V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSG920PNC V4.XSiemens	before V4.3.4Affected
RUGGEDCOM RSG920PNC V5.XSiemens	before V5.0.1Affected
RUGGEDCOM RSL910Siemens	before V5.0.1Affected
RUGGEDCOM RSL910NCSiemens	before V5.0.1Affected
RUGGEDCOM RST2228Siemens	before V5.0.1Affected
RUGGEDCOM RST2228PSiemens	before V5.0.1Affected
RUGGEDCOM RST916CSiemens	before V5.0.1Affected
RUGGEDCOM RST916PSiemens	before V5.0.1Affected
SCALANCE XB205-3 (SC, PN)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB205-3 (ST, E/IP)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB205-3 (ST, E/IP)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB205-3 (ST, PN)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB205-3LD (SC, E/IP)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB205-3LD (SC, PN)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB206-2 (SC)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB206-2 (ST/BFOC)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB206-2 LDSiemens	V3.0 to before V3.0.2Affected
SCALANCE XB206-2 SCSiemens	V3.0 to before V3.0.2Affected
SCALANCE XB206-2 STSiemens	V3.0 to before V3.0.2Affected
SCALANCE XB206-2LDSiemens	V3.0 to before V3.0.2Affected
SCALANCE XB208 (E/IP)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB208 (PN)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB213-3 (SC, E/IP)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB213-3 (SC, PN)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB213-3 (ST, E/IP)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB213-3 (ST, PN)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB213-3LD (SC, E/IP)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB213-3LD (SC, PN)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB216 (E/IP)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XB216 (PN)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC206-2 (SC)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC206-2 (ST/BFOC)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC206-2G PoESiemens	V3.0 to before V3.0.2Affected
SCALANCE XC206-2G PoE (54 V DC)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC206-2G PoE EEC (54 V DC)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC206-2SFPSiemens	V3.0 to before V3.0.2Affected
SCALANCE XC206-2SFP EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XC206-2SFP GSiemens	V3.0 to before V3.0.2Affected
SCALANCE XC206-2SFP G (EIP DEF.)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC206-2SFP G EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XC208Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC208EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XC208GSiemens	V3.0 to before V3.0.2Affected
SCALANCE XC208G (EIP def.)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC208G EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XC208G PoESiemens	V3.0 to before V3.0.2Affected
SCALANCE XC208G PoE (54 V DC)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC216Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC216-3G PoESiemens	V3.0 to before V3.0.2Affected
SCALANCE XC216-3G PoE (54 V DC)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC216-4CSiemens	V3.0 to before V3.0.2Affected
SCALANCE XC216-4C GSiemens	V3.0 to before V3.0.2Affected
SCALANCE XC216-4C G (EIP Def.)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC216-4C G EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XC216EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XC224Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC224-4C GSiemens	V3.0 to before V3.0.2Affected
SCALANCE XC224-4C G (EIP Def.)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XC224-4C G EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XF204Siemens	V3.0 to before V3.0.2Affected
SCALANCE XF204 DNASiemens	V3.0 to before V3.0.2Affected
SCALANCE XF204-2BASiemens	V3.0 to before V3.0.2Affected
SCALANCE XF204-2BA DNASiemens	V3.0 to before V3.0.2Affected
SCALANCE XF204GSiemens	V3.0 to before V3.0.2Affected
SCALANCE XM408-4CSiemens	V6.1.0 to before V6.1.1Affected
SCALANCE XM408-4C (L3 int.)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XM408-8CSiemens	V6.1.0 to before V6.1.1Affected
SCALANCE XM408-8C (L3 int.)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XM416-4CSiemens	V6.1.0 to before V6.1.1Affected
SCALANCE XM416-4C (L3 int.)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XP208Siemens	V3.0 to before V3.0.2Affected
SCALANCE XP208Siemens	V3.0 to before V3.0.2Affected
SCALANCE XP208 (Ethernet/IP)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XP208EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP208EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP208GSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP208G EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP208G PoE EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP208G PPSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP208PoE EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP208PoE EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP216Siemens	V3.0 to before V3.0.2Affected
SCALANCE XP216 (Ethernet/IP)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XP216 (V2)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XP216EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP216EEC (V2)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XP216GSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP216G EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP216G PoE EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP216POE EECSiemens	V3.0 to before V3.0.2Affected
SCALANCE XP216PoE EEC (V2)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XR324WG (24 x FE, AC 230V)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XR324WG (24 X FE, DC 24V)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XR326-2C PoE WGSiemens	V3.0 to before V3.0.2Affected
SCALANCE XR326-2C PoE WG (without UL)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XR328-4C WG (24XFE, 4XGE, 24V)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XR328-4C WG (28xGE, AC 230V)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XR328-4C WG (28xGE, DC 24V)Siemens	V3.0 to before V3.0.2Affected
SCALANCE XR524-8C, 1x230VSiemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR524-8C, 1x230V (L3 int.)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR524-8C, 24VSiemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR524-8C, 24V (L3 int.)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR524-8C, 2x230VSiemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR524-8C, 2x230V (L3 int.)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR526-8C, 1x230VSiemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR526-8C, 1x230V (L3 int.)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR526-8C, 24VSiemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR526-8C, 24V (L3 int.)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR526-8C, 2x230VSiemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR526-8C, 2x230V (L3 int.)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR528-6MSiemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR528-6M (2HR2, L3 int.)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR528-6M (2HR2)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR528-6M (L3 int.)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR552-12MSiemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR552-12M (2HR2, L3 int.)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR552-12M (2HR2)Siemens	V6.1.0 to before V6.1.1Affected
SCALANCE XR552-12M (2HR2)Siemens	V6.1.0 to before V6.1.1Affected
SIPLUS NET SCALANCE XC206-2Siemens	V3.0 to before V3.0.2Affected
SIPLUS NET SCALANCE XC206-2SFPSiemens	V3.0 to before V3.0.2Affected
SIPLUS NET SCALANCE XC208Siemens	V3.0 to before V3.0.2Affected
SIPLUS NET SCALANCE XC216-4CSiemens	V3.0 to before V3.0.2Affected

References

https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf
1039463vdb-entry
1039464vdb-entry
101041vdb-entry
https://cert-portal.siemens.com/productcert/html/ssa-856721.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.