CVE-2018-13802 Command injection in ROX II
Authenticated high-privileged users can execute arbitrary OS commands on Siemens ROX II devices via SSH, leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-13802?
CVE-2018-13802 is a high-severity command injection vulnerability in Siemens AG ROX II, published on 10 Oct 2018. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privileged user account access via SSH could circumvent restrictions in place and execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the SSH interface in on port 22/tcp. The attacker must be authenticated to exploit the vulnerability. The vulnerability could allow an attacker to execute arbitrary code on the device.
Which versions are affected by CVE-2018-13802?
It affects 1 product.
Products include Siemens Rox Ii Firmware.
How do I fix CVE-2018-13802?
No fix has been published for CVE-2018-13802 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2018-13802 being exploited?
There is no known exploitation of CVE-2018-13802 in the wild and no public exploit code.
Other vulnerabilities in Siemens AG ROX II
Sources
Also known as GHSA-9825-q2vq-x466.