CVE-2020-28398 | Siemens RUGGEDCOM ROX RX5000 2.15.1 CLI cross-site request forgery (ssa-384652)

A vulnerability, which was classified as problematic, was found in Siemens RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536 and RUGGEDCOM ROX RX5000 2.15.1. Affected is an unknown function of the component CLI. The manipulation leads to cross-site request forgery.

This vulnerability is traded as CVE-2020-28398. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.