CVE-2013-6925

high

Published 2013-12-17 · Modified 2026-04-29

CVSS v3

—

CVSS v2

8.3

VIR risk

8.3

Description

The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-324789.pdf

References

CWEs

CWE-330

Verify integrity in audit chain (admin only). AS-IS.