CVE-2017-12738

An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into clicking on a malicious link.

• CWE-79

• http://www.securityfocus.com/bid/101884Third Party Advisory, VDB Entry
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdfMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/101884Third Party Advisory, VDB Entry
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdfMitigation, Vendor Advisory

Published

Nov 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12732A Stack-based Buffer Overflow issue was discovered in GE CIM…
• CVE-2017-12733A Missing Authentication for Critical Function issue was dis…
• CVE-2017-12734A vulnerability has been identified in LOGO! 8 BM (incl. SIP…7.5
• CVE-2017-12735A vulnerability has been identified in LOGO! 8 BM (incl. SIP…7.4
• CVE-2017-12736After initial configuration, the Ruggedcom Discovery Protoco…8.8
• CVE-2017-12737An issue was discovered on Siemens SICAM RTUs SM-2556 COM Mo…
• CVE-2017-12739An issue was discovered on Siemens SICAM RTUs SM-2556 COM Mo…
• CVE-2017-1274IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based ove…
• CVE-2017-12740Siemens LOGO! Soft Comfort (All versions before V8.2) lacks …
• CVE-2017-12741Specially crafted packets sent to port 161/udp could cause a…7.5
• CVE-2017-1275IBM Rational Quality Manager and IBM Rational Collaborative …5.4
• CVE-2017-12754Stack buffer overflow in httpd in Asuswrt-Merlin firmware 38…8.8