CVE-2017-2682
HighSummary
The Siemens web application RUGGEDCOM NMS version below 1.2 on ports 8080/TCP and 8081/TCP is vulnerable to a Cross-Site Request Forgery (CSRF) attack. An attacker could perform administrative operations if the targeted user has an active session and is induced to trigger a malicious request.
Risk Assessment
This vulnerability could lead to unauthorized access to administrative functions of the application, posing a serious security threat to the system.
Recommendation
It is recommended to update the RUGGEDCOM NMS application to version 1.2 or newer and implement protections against CSRF attacks.
Other vulnerabilities in Siemens RUGGEDCOM NMS
Original NVD description (English source)
The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery (CSRF) attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to trigger a malicious request.