CVE-2016-5073

CloudView NMS before 2.10a has XSS via SNMP...

CVE-2016-5075

CloudView NMS (before 2.10a) is affected by a Cross-Site Scripting (XSS) vulnerability via a TELNET login. Root cause: XSS in the login flow. Impact as described: vulnerability could allow injection of script/HTML. Affected version: prior to 2.10a; fix likely in 2.10a or later (document implies u...

CVE-2016-5076

CloudView NMS is affected by CVE-2016-5076: prior to version 2.10a, a remote attacker can disclose sensitive information by making a direct request to admin/auto.def. Affected product: CloudView NMS; vulnerable component/endpoint is the admin/auto.def request path; root cause is information discl...

CVE-2016-5075

CloudView NMS before 2.10a has XSS via a TELNET login...

CVE-2016-5073

CloudView NMS (before 2.10a) is reported vulnerable to Cross‑Site Scripting (XSS) via SNMP. The CNVD entry confirms a remote attacker can inject arbitrary script/HTML through SNMP, with impact limited to the web interface’s confidentiality/ integrity, and requires no authentication due to SNMP ex...

Siemens RUGGEDCOM NMS Equipment Vulnerable to CSRF, XSS

Enterprise network management equipment made by Siemens suffers from vulnerabilities that could allow an attacker to perform administrative actions. Two flaws, a cross-site scripting XSS vulnerability and a cross-site request forgery CSRF vulnerability, exist in the company’s RUGGEDCOM NMS line o...

Siemens RUGGEDCOM NMS

CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: RUGGEDCOM NMS Vulnerabilities: Cross-Site Request Forgery, Cross-Site Scripting. AFFECTED PRODUCTS Siemens reports that the vulnerability affects the following RUGGEDCOM monitoring products: RUGGEDC...

CVE-2017-2683

A non-privileged user of the Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting XSS attack, potentially resulting in obtaining administrative permissions...

CVE-2017-2682

The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...

CVE-2017-2682

The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...

Cross site request forgery (csrf)

The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...

CVE-2017-2683

A non-privileged user of the Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting XSS attack, potentially resulting in obtaining administrative permissions...

CVE-2017-2683

A non-privileged user of the Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting XSS attack, potentially resulting in obtaining administrative permissions...

CVE-2017-2682

The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...

CVE-2017-2682

CVE-2017-2682 concerns Siemens RUGGEDCOM NMS web application CSRF vulnerability. The issue affects RUGGEDCOM NMS versions prior to V2.1.0 and involves the web interface on ports 8080/TCP and 8081/TCP, where a remote attacker could induce an authenticated user to perform administrative operations ...

CVE-2017-2683

Siemens RUGGEDCOM NMS (all versions prior to 2.1.0) on ports 8080/8081 contains a persistent XSS vulnerability (CVE-2017-2683) allowing a non-privileged user to potentially obtain administrative permissions. The issue is described in ICS-CERT advisory ICSA-17-059-01 and Siemens security advisory ...

Siemens RuggedCom NMS Cross-Site Scripting Vulnerability

RUGGEDCOM NMS is a Siemens enterprise solution for monitoring, configuring and maintaining RUGGEDCOM mission-critical networks. A cross-site scripting vulnerability exists in Siemens RuggedCom NMS versions prior to 2.1, which can be exploited by attackers to launch a cross-site scripting attack a...

Alcatel-Lucent Omnivista Detection (HTTP)

HTTP based detection of Alcatel-Lucent Omnivista. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MikroTik RouterOS SNMP Security Bypass (CVE-2008-6976)

MikroTik RouterOS is prone to a security-bypass vulnerability because the software fails to sufficiently sanitize SNMP requests. Successfully exploiting this issue allows attackers to write to and change certain aspects of the Network Management System NMS. This may aid in further attacks. Versio...

SevOne NMS 5.3.60 Remote Root

!/usr/bin/env python Exploit Title: SevOne NMS = 5.3.6.0 reverse shell remote root Date: 01/14/2016 Exploit Author: @iamsecurity Vendor Homepage: https://www.sevone.com/ Software Link: https://www.sevone.com/download2/free/vimage/SevOne-Download.ova Version: 5.3.6.0 """sevone.py: Simple reverse...