VULNERABILITY INTELLIGENCE

CVE-2017-12736

CVSS score8.8 HIGH
EPSS probability1.07%
CISA KEVNot currently listed
Published2017-12-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.

Weakness classification

  • CWE-665: Improper Initialization
  • CWE-1188: Initialization of a Resource with an Insecure Default

Primary references