Skip to content
Sign in
Not rated

CVE-2017-2682 The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to…

Description

The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery (CSRF) attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to trigger a malicious request.

Affected products and versions

Product Affected versions Fixed in
RUGGEDCOM NMS All versions < V2.1 (Windows and Linux) Versions not published

Other CVEs of RUGGEDCOM NMS All versions < V2.1 (Windows and Linux)

The 2 CVEs of RUGGEDCOM NMS All versions < V2.1 (Windows and Linux) →
CVE-2017-2683 A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform… Not rated
Track this CVE