Skip to content
Not rated

CVE-2017-2683 A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform…

Description

A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions.

Affected products and versions

Product Affected versions Fixed in
RUGGEDCOM NMS All versions < V2.1 (Windows and Linux) Versions not published
The 2 CVEs of RUGGEDCOM NMS All versions < V2.1 (Windows and Linux) →
Track this CVE