CVE-2016-5073

CloudView NMS before 2.10a has XSS via SNMP...

CVE-2016-5076

CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def...

CVE-2016-5074

CloudView NMS before 2.10a has a format string issue exploitable over SNMP...

CVE-2016-5076

CloudView NMS is affected by CVE-2016-5076: prior to version 2.10a, a remote attacker can disclose sensitive information by making a direct request to admin/auto.def. Affected product: CloudView NMS; vulnerable component/endpoint is the admin/auto.def request path; root cause is information discl...

CVE-2016-5074

CVE-2016-5074 affects CloudView NMS prior to version 2.10a. Connected sources consistently describe a format-string vulnerability in CloudView NMS that is exploitable over SNMP. The vulnerability arises in formatting-related handling within the affected component, enabling potential descriptor in...

CVE-2016-5075

CloudView NMS before 2.10a has XSS via a TELNET login...

CVE-2016-5073

CloudView NMS (before 2.10a) is reported vulnerable to Cross‑Site Scripting (XSS) via SNMP. The CNVD entry confirms a remote attacker can inject arbitrary script/HTML through SNMP, with impact limited to the web interface’s confidentiality/ integrity, and requires no authentication due to SNMP ex...

CVE-2016-5076: Exposure of Sensitive Information to an Unauthorized Actor

CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def...

CVE-2016-5073: Improper Neutralization of Input During Web Page Generation

CloudView NMS before 2.10a has XSS via SNMP...

CVE-2016-5075: Improper Neutralization of Input During Web Page Generation

CloudView NMS before 2.10a has XSS via a TELNET login...

CVE-2016-5074: Use of Externally-Controlled Format String

CloudView NMS before 2.10a has a format string issue exploitable over SNMP...

Siemens RUGGEDCOM NMS Equipment Vulnerable to CSRF, XSS

Enterprise network management equipment made by Siemens suffers from vulnerabilities that could allow an attacker to perform administrative actions. Two flaws, a cross-site scripting XSS vulnerability and a cross-site request forgery CSRF vulnerability, exist in the company’s RUGGEDCOM NMS line o...

Siemens RUGGEDCOM NMS

CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: RUGGEDCOM NMS Vulnerabilities: Cross-Site Request Forgery, Cross-Site Scripting. AFFECTED PRODUCTS Siemens reports that the vulnerability affects the following RUGGEDCOM monitoring products: RUGGEDC...

CVE-2017-2682

The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...

CVE-2017-2683

A non-privileged user of the Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting XSS attack, potentially resulting in obtaining administrative permissions...

Cross site request forgery (csrf)

The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...

CVE-2017-2682

The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...

CVE-2017-2683

A non-privileged user of the Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting XSS attack, potentially resulting in obtaining administrative permissions...

CVE-2017-2682

The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...

CVE-2017-2683

A non-privileged user of the Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting XSS attack, potentially resulting in obtaining administrative permissions...