VYPR

Rox Ii Firmware

by Siemens Foundation

CVEs (2)

  • CVE-2018-13801HigOct 10, 2018
    risk 0.57cvss 8.8epss 0.03

    A vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network access to port 22/tcp and valid low-privileged user credentials for the target device could perform a privilege escalation and gain root privileges. Successful exploitation requires…

  • CVE-2018-13802HigOct 10, 2018
    risk 0.47cvss 7.2epss 0.04

    A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privileged user account access via SSH could circumvent restrictions in place and execute arbitrary operating system commands. Successful exploitation requires that the…