CVE record · CVE-2017-12736

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.

CVSS 8.8 HighEPSS 0.011 · 64th percentile

Published by the CVE Program (CNA: siemens) at 26 Dec 2017, 04:00 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Siemens	RUGGEDCOM i800	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM i800NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM i801	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM i801NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM i802	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM i802NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM i803	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM i803NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM M2100	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM M2100NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM M2200	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM M2200NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM M969	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM M969NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RMC30	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RMC30NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RMC8388 V4.X	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RMC8388 V5.X	affected before V5.0.1 custom Other versions: unknown
Siemens	RUGGEDCOM RMC8388NC V4.X	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RMC8388NC V5.X	affected before V5.0.1 custom Other versions: unknown
Siemens	RUGGEDCOM RP110	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RP110NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS1600	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS1600F	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS1600FNC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS1600NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS1600T	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS1600TNC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS400	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS400NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS401	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS401NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS416	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS416NC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS416NCv2 V4.X	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS416NCv2 V5.X	affected before V5.0.1 custom Other versions: unknown
Siemens	RUGGEDCOM RS416P	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS416PNC	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS416PNCv2 V4.X	affected before V4.3.4 custom Other versions: unknown
Siemens	RUGGEDCOM RS416PNCv2 V5.X	affected before V5.0.1 custom Other versions: unknown

And 213 more products. The full list is on the CVE record.

Identifiers: CVE-2017-12736
CNA: siemens
Weakness (CWE): CWE-1188
Tags: Siemens RUGGEDCOM i800
Siemens RUGGEDCOM i800NC
Siemens RUGGEDCOM i801
Siemens RUGGEDCOM i801NC
Siemens RUGGEDCOM i802
Siemens RUGGEDCOM i802NC
Siemens RUGGEDCOM i803
Siemens RUGGEDCOM i803NC
CWE-1188
Published: 26 Dec 2017
Updated: 12 Aug 2025

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
8.8	High	3.1	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CNA (siemens)

CISA KEV Not listed.
EPSS 0.011, the 64th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 26 Dec 2017. New records show when each source confirmed them.

Sources

References from the CNA

www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf confirm
www.securitytracker.com/id/1039463 vdb-entrysectrack
www.securitytracker.com/id/1039464 vdb-entrysectrack
www.securityfocus.com/bid/101041 vdb-entrybid
cert-portal.siemens.com/productcert/html/ssa-856721.html

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.