CVE-2017-2683

HIGH 8.2CVE-2017-2683 · Published 27/02/2017 · updated 17/06/2026

In short

CVE-2017-2683 is a HIGH (CVSS 8.2) vulnerability affecting ruggedcom network management software (siemens).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ruggedcom network management software siemens	`≤ 2.0.2`	No fix yet

Description

A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions.

References

securityfocus.com/bid/96455
securitytracker.com/id/1037958
siemens.com/cert/pool/cert/siemens_security_advisory_ssa-363881.pdf · Vendor Advisory
ics-cert.us-cert.gov/advisories/ICSA-17-059-01

More vulnerabilities in ruggedcom network management software

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free