What’s Vulnerable › Vulnerabilities

CVE-2013-6926

• Severity: high (CVSS 8.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-12-17 · updated 2026-06-17
• Weakness: CWE-863

Description

The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended restrictions on administrative actions by leveraging access to a (1) guest or (2) operator account.

Affected products

• Siemens Ruggedcom Rugged Operating System: before 3.12.2 — fixed in 3.12.2

How to fix

Upgrade to a fixed version: Siemens Ruggedcom Rugged Operating System 3.12.2. Check the vendor advisory for mitigations.

References

• http://ics-cert.us-cert.gov/advisories/ICSA-13-340-01
• http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-324789.pdf
• http://ics-cert.us-cert.gov/advisories/ICSA-13-340-01
• http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-324789.pdf

Get alerted when CVE-2013-6926 or the next vulnerability affects your stack