CVE-2013-6926

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-6926
The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended restrictions on administrative actions by leveraging access to a (1) guest or (2) operator account.

8.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:C

Exploitability : 8.0 / Impact : 8.5

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact COMPLETE

References
Link Resource
http://ics-cert.us-cert.gov/advisories/ICSA-13-340-01 Third Party Advisory US Government Resource
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-324789.pdf Broken Link Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:*:*:*:*:*:*:*:*
History

01 Feb 2022, 16:53

Type Values Removed Values Added
CPE cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.11.0:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.11.4:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.12:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.2.5:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.8.5:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.4.9:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.7.9:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.10.1:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.9.3:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.3.6:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.6.6:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:3.5.4:*:*:*:*:*:*:*
CWE CWE-264 CWE-863
References (MISC) http://ics-cert.us-cert.gov/advisories/ICSA-13-340-01 - US Government Resource (MISC) http://ics-cert.us-cert.gov/advisories/ICSA-13-340-01 - Third Party Advisory, US Government Resource
References (CONFIRM) http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-324789.pdf - Vendor Advisory (CONFIRM) http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-324789.pdf - Broken Link, Vendor Advisory
Information

Published : 2013-12-17 04:46

Updated : 2023-12-10 11:16

NVD link : CVE-2013-6926

Mitre link : CVE-2013-6926

CVE.ORG link : CVE-2013-6926

JSON object : View

Products Affected

siemens

  • ruggedcom_rugged_operating_system
CWE
CWE-863

Incorrect Authorization