Cross site request forgery (csrf)

The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...

CVE-2017-2683

A non-privileged user of the Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting XSS attack, potentially resulting in obtaining administrative permissions...

CVE-2017-2682

CVE-2017-2682 concerns Siemens RUGGEDCOM NMS web application CSRF vulnerability. The issue affects RUGGEDCOM NMS versions prior to V2.1.0 and involves the web interface on ports 8080/TCP and 8081/TCP, where a remote attacker could induce an authenticated user to perform administrative operations ...

CVE-2017-2683

Siemens RUGGEDCOM NMS (all versions prior to 2.1.0) on ports 8080/8081 contains a persistent XSS vulnerability (CVE-2017-2683) allowing a non-privileged user to potentially obtain administrative permissions. The issue is described in ICS-CERT advisory ICSA-17-059-01 and Siemens security advisory ...

CVE-2017-2682

The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...

CVE-2017-2683

A non-privileged user of the Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting XSS attack, potentially resulting in obtaining administrative permissions...

Siemens RuggedCom NMS Cross-Site Request Forgery Vulnerability

RUGGEDCOM NMS is a Siemens enterprise solution for monitoring, configuring and maintaining RUGGEDCOM mission-critical networks. A cross-site request forgery vulnerability exists in Siemens RuggedCom NMS versions prior to 2.1, which can be exploited by an attacker to trigger a malicious request,...

Siemens RuggedCom NMS Cross-Site Scripting Vulnerability

RUGGEDCOM NMS is a Siemens enterprise solution for monitoring, configuring and maintaining RUGGEDCOM mission-critical networks. A cross-site scripting vulnerability exists in Siemens RuggedCom NMS versions prior to 2.1, which can be exploited by attackers to launch a cross-site scripting attack a...

RuggedCom Rugged Operating System < 4.2.1 Information Disclosure

Binary data 9054.prm...

siemens Ruggedcom RMC30 弱口令

No description provided by source...

Siemens RUGGEDCOM ROX-based devices authentication bypass Vulnerability, CVE-2 0 1 5-7 8 7 1-a vulnerability warning-the black bar safety net

Affected system: Siemens RUGGEDCOM ROX 2.9.0 Description: CVECAN ID: CVE-2 0 1 5-7 8 7 1 Siemens RUGGEDCOM based on the ROX device for connection to the harsh environment of the equipment. Siemens RUGGEDCOM ROX-based devices exist authentication bypass vulnerability, by sending a configuration of...

Siemens RUGGEDCOM ROX-based devices NTP input validation Vulnerability, CVE-2 0 1 5-5 3 0 0-a vulnerability warning-the black bar safety net

Affected system: Siemens RUGGEDCOM ROX 2.9.0 Description: CVECAN ID: CVE-2 0 1 5-5 3 0 0 Siemens RUGGEDCOM based on the ROX device for connection to the harsh environment of the equipment. Siemens RUGGEDCOM ROX-based devices there is an input validation vulnerability, in some circumstances, by...

Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-064-01 Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability that was published March 5, 2015, on the NCCIC/ICS-CERT web site. The “GHOST”Further information about the GHOST vulnerability:...

Siemens Ruggedcom WIN Vulnerability

OVERVIEW IOActive has coordinated with Siemens regarding multiple vulnerabilities in the Ruggedcom WIN firmware. Siemens has produced firmware updates that mitigates these vulnerabilities. These vulnerabilities could be exploited remotely if there is network access to the affected service. AFFECT...

Siemens RUGGEDCOM ROS Information Disclosure Vulnerability

Siemens RuggedCom ROS and ROX-based devices are used for device connectivity in harsh environments, e.g. substations, traffic management chassis etc. An information disclosure vulnerability exists in Siemens RUGGEDCOM ROS versions prior to 4.2.1. Because the program fails to pad Ethernet frames...

CVE-2015-7836

Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame...

Design/Logic Flaw

Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame...

CVE-2015-7836

Siemens RuggedCom ROS

CVE-2015-7836

Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame...

Siemens RUGGEDCOM ROX-based Devices NTP Vulnerabilities

OVERVIEW Siemens has reported to NCCIC/ICS-CERT that NTP daemon vulnerabilities exist in the Siemens RUGGEDCOM ROX-based devices. Siemens has produced firmware updates to mitigate these vulnerabilities. These vulnerabilities could be exploited remotely. AFFECTED PRODUCTS The following Siemens...