CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 5.8
CWE Name:  Improper Input Validation
Summary: a vulnerability has been identified in rfid 181-eip (all versions), ruggedcom win (v4.4, v4.5, v5.0, and v5.1), scalance x-200 (all versions < v5.2.3), scalance x-200irt (all versions < v5.4.1), scalance x-200rna (all versions < v3.2.6), scalance x-300 (all versions), scalance x408 (all versions), scalance x414 (all versions), simatic rf182c (all versions). unprivileged remote attackers located in the same local network segment (osi layer 2) could gain remote code execution on the affected products by sending a specially crafted dhcp response to a client?s dhcp request.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-06-14
Last Modified Date: 2019-10-10