What’s Vulnerable › Vulnerabilities

CVE-2013-6925

• Severity: high (CVSS 8.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-12-17 · updated 2026-06-17
• Weakness: CWE-330

Description

The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value.

Affected products

• Siemens Ruggedcom Rugged Operating System: before 3.12.2 — fixed in 3.12.2

How to fix

Upgrade to a fixed version: Siemens Ruggedcom Rugged Operating System 3.12.2. Check the vendor advisory for mitigations.

References

• http://ics-cert.us-cert.gov/advisories/ICSA-13-340-01
• http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-324789.pdf
• http://ics-cert.us-cert.gov/advisories/ICSA-13-340-01
• http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-324789.pdf

Get alerted when CVE-2013-6925 or the next vulnerability affects your stack