CVE-2017-2688 - AskarLabs CVE Database

CVE-2017-2688

Vendor N/A

Product RUGGEDCOM ROX I All versions

Weakness CWE-352 · CSRF

Published March 29, 2017

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF.

Key dates

02Disclosure timeline

March 29, 2017 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-2688 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/352.html

Related vulnerabilities

04Related CVE

CVE-2026-8411 Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/delete CVE-2025-47462 WordPress Challan plugin <= 3.7.58 - CSRF to Privilege Escalation vulnerability CVE-2017-20221 Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution CVE-2023-27623 WordPress WP Page Numbers Plugin <= 0.5 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2021-24675 One User Avatar < 2.3.7 - Avatar Update via CSRF