Access control flaw in Siemens ROX II
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass, Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-264 and CWE-269.
Summary
A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privileged user account access via SSH could circumvent restrictions in place and execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the SSH interface in on port 22/tcp. The attacker must be authenticated to exploit the vulnerability. The vulnerability could allow an attacker to execute arbitrary code on the device.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | ROX II | before V2.12.1 | V2.12.1 | Patch available | CNA |
- ROX II VendorSiemens Affected before V2.12.1 Fixed in V2.12.1 Patch available CNA
Remediation
- Fix · CNA ROX II (Siemens AG) Fixed in V2.12.1
Timeline
- 2026-10-02 Threatist record created from CVE-2018-13802
- 2026-10-03 Alias added: GHSA-9825-q2vq-x466
References
More Siemens Rox Ii Firmware vulnerabilities
- TI-2018-10013 Access control flaw in Siemens ROX II CVSS 3.0HIGH 8.8
Sources
- CVE-2018-13802 · CVE Program
- CVE-2018-13802 · NVD
- FIRST EPSS
- GHSA-9825-q2vq-x466 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences