Skip to content
OpenAdvisories
High SSA-856721 1 CVE

SSA-856721: Vulnerability in RUGGEDCOM Discovery Protocol (RCDP) of Industrial Communication Devices

Published Sep 28, 2017 · Updated Aug 12, 2025 · Revision 4

Vendor: Siemens Product: RUGGEDCOM i800 Product: RUGGEDCOM i800NC Product: RUGGEDCOM i801 Product: RUGGEDCOM i801NC Product: RUGGEDCOM i802 Product: RUGGEDCOM i802NC Product: RUGGEDCOM i803 Product: RUGGEDCOM i803NC Product: RUGGEDCOM M2100 Product: RUGGEDCOM M2100NC Product: RUGGEDCOM M2200 Product: RUGGEDCOM M2200NC Product: RUGGEDCOM M969 Product: RUGGEDCOM M969NC Product: RUGGEDCOM RMC30 Product: RUGGEDCOM RMC30NC Product: RUGGEDCOM RMC8388 V4.X Product: RUGGEDCOM RMC8388 V5.X Product: RUGGEDCOM RMC8388NC V4.X Product: RUGGEDCOM RMC8388NC V5.X Product: RUGGEDCOM RP110 Product: RUGGEDCOM RP110NC Product: RUGGEDCOM RS1600 Product: RUGGEDCOM RS1600F Product: RUGGEDCOM RS1600FNC Product: RUGGEDCOM RS1600NC Product: RUGGEDCOM RS1600T Product: RUGGEDCOM RS1600TNC Product: RUGGEDCOM RS400 +121 more

Summary

The RUGGEDCOM RCDP protocol is not properly configured after commissioning of RUGGEDCOM ROS based devices and some SCALANCE X switch models and could allow unauthenticated remote users to perform administrative operations. An attacker must be in the same adjacent network and the RCDP daemon must be enabled in order to exploit the vulnerability.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #4

    Expanded list of affected product families to individual products; CVE-2017-12736: changed CWE from CWE-20 to CWE-1188

  2. #3

    Added update information for SCALANCE XR-500/XM-400, and SCALANCE XB-200/XC-200/XP-200/XR300-WG

  3. #2

    Adjusted support team address for Ruggedcom devices

  4. #1

    Publication Date

References