CVE-2017-2683

High

Published: 27/02/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions.

Risk Assessment

An attacker could exploit this vulnerability to gain control over the application, posing a serious threat to the security of the organization's data and systems.

Recommendation

It is recommended to update the application to version 1.2 or later and implement appropriate protections against XSS attacks.

Other vulnerabilities in Siemens RUGGEDCOM NMS

CVE-2017-2682High
The Siemens web application RUGGEDCOM NMS version below 1.2 on ports 8080/TCP and 8081/TCP is vulnerable to a Cross-Site Request Forgery (CSRF) attack. An attacker could perform administrative operations if the targeted user has an active session and is induced to trigger a malicious request.

Original NVD description (English source)