Siemens Ruggedcom Network Management Software vulnerabilities

2 CVEs affecting Siemens Ruggedcom Network Management Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-2683, published 2017-02-27.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-2682, published 2017-02-27. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery (CSRF) attack, potentially allowing an attacker to…
• CVE-2017-2683, published 2017-02-27. High severity, CVSS 8.2. EPSS: 1.4% chance of exploitation in the next 30 days. A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in…