CVE-2017-12739

An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow unauthenticated remote attackers to execute arbitrary code on the affected device.
References
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:siemens:sm-2556_firmware:dnpi00:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sm-2556_firmware:enos00:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sm-2556_firmware:erac00:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sm-2556_firmware:eta2:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sm-2556_firmware:etls00:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sm-2556_firmware:modi00:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sm-2556:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-11-15 08:29

Updated : 2023-12-10 12:15


NVD link : CVE-2017-12739

Mitre link : CVE-2017-12739

CVE.ORG link : CVE-2017-12739


JSON object : View

Products Affected

siemens

  • sm-2556_firmware
  • sm-2556
CWE
CWE-1188

Insecure Default Initialization of Resource