GCVE - cpe:2.3:o:siemens:ruggedcom_rox_i:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:siemens:ruggedcom_rox_i:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Ruggedcom Rox I (`975f6987-b65f-51c9-9def-b1a6b576036e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-6864`	vulnerable	2026-06-08 05:09:55.041289	Details available The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow an authenticated user to perform stored Cross-Site Scripting attacks. Published: 2017-03-29T01:00:00.000Z Updated: 2024-08-05T15:41:17.697Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/97170 https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf http://www.securitytracker.com/id/1038160 https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2689`	vulnerable	2026-06-08 05:09:25.320861	Details available Siemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or change configuration settings. Published: 2017-03-29T01:00:00.000Z Updated: 2024-08-05T14:02:07.178Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/97170 https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf http://www.securitytracker.com/id/1038160 https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2688`	vulnerable	2026-06-08 05:09:25.320516	Details available The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF. Published: 2017-03-29T01:00:00.000Z Updated: 2024-08-05T14:02:07.201Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/97170 https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf http://www.securitytracker.com/id/1038160 https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2687`	vulnerable	2026-06-08 05:09:25.320143	Details available Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induced to click on a malicious link. Published: 2017-03-29T01:00:00.000Z Updated: 2024-08-05T14:02:07.202Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/97170 https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf http://www.securitytracker.com/id/1038160 https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2686`	vulnerable	2026-06-08 05:09:25.319709	Details available Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive information. Published: 2017-03-29T01:00:00.000Z Updated: 2024-08-05T14:02:07.252Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/97170 https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf http://www.securitytracker.com/id/1038160 https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.