CVE-2017-2688

The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF.

• CWE-352
• CWE-352

• http://www.securityfocus.com/bid/97170Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038160
• https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdfVendor Advisory
• http://www.securityfocus.com/bid/97170Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038160
• https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdfVendor Advisory

Published

Mar 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2682The Siemens web application RUGGEDCOM NMS < V1.2 on port 808…
• CVE-2017-2683A non-privileged user of the Siemens web application RUGGEDC…
• CVE-2017-2684Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow…
• CVE-2017-2685Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00…
• CVE-2017-2686Siemens RUGGEDCOM ROX I (all versions) contain a vulnerabili…
• CVE-2017-2687Siemens RUGGEDCOM ROX I (all versions) contain a vulnerabili…
• CVE-2017-2689Siemens RUGGEDCOM ROX I (all versions) allow an authenticate…
• CVE-2017-2690SoftCo with software V200R003C20,eSpace U1910 with software …
• CVE-2017-2691Huawei P9 versions earlier before EVA-AL10C00B373, versions …
• CVE-2017-2692The Keyguard application in ALE-L02C635B140 and earlier vers…
• CVE-2017-2693ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and ear…
• CVE-2017-2694The AlarmService component in HwVmall with software earlier …