2063 matches found
CVE-2017-2682
The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...
CVE-2017-2683
A non-privileged user of the Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting XSS attack, potentially resulting in obtaining administrative permissions...
CVE-2017-2682
CVE-2017-2682 concerns Siemens RUGGEDCOM NMS web application CSRF vulnerability. The issue affects RUGGEDCOM NMS versions prior to V2.1.0 and involves the web interface on ports 8080/TCP and 8081/TCP, where a remote attacker could induce an authenticated user to perform administrative operations ...
CVE-2017-2683
Siemens RUGGEDCOM NMS (all versions prior to 2.1.0) on ports 8080/8081 contains a persistent XSS vulnerability (CVE-2017-2683) allowing a non-privileged user to potentially obtain administrative permissions. The issue is described in ICS-CERT advisory ICSA-17-059-01 and Siemens security advisory ...
CVE-2017-2683: Improper Neutralization of Input During Web Page Generation
A non-privileged user of the Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting XSS attack, potentially resulting in obtaining administrative permissions...
CVE-2017-2682: Cross-Site Request Forgery (CSRF)
The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...
PT-2017-15470
Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM NMS versions prior to V1.2 Description A non-privileged user of the Siemens web application could perform a persistent Cross-Site Scripting XSS attack on port 8080/TCP and 8081/TCP, potentially resulting in obtaining...
Siemens RuggedCom NMS Cross-Site Request Forgery Vulnerability
RUGGEDCOM NMS is a Siemens enterprise solution for monitoring, configuring and maintaining RUGGEDCOM mission-critical networks. A cross-site request forgery vulnerability exists in Siemens RuggedCom NMS versions prior to 2.1, which can be exploited by an attacker to trigger a malicious request,...
Siemens RuggedCom NMS Cross-Site Scripting Vulnerability
RUGGEDCOM NMS is a Siemens enterprise solution for monitoring, configuring and maintaining RUGGEDCOM mission-critical networks. A cross-site scripting vulnerability exists in Siemens RuggedCom NMS versions prior to 2.1, which can be exploited by attackers to launch a cross-site scripting attack a...
RuggedCom Rugged Operating System < 4.2.1 Information Disclosure
Binary data 9054.prm...
siemens Ruggedcom RMC30 弱口令
No description provided by source...
Siemens RUGGEDCOM ROX-based devices authentication bypass Vulnerability, CVE-2 0 1 5-7 8 7 1-a vulnerability warning-the black bar safety net
Affected system: Siemens RUGGEDCOM ROX 2.9.0 Description: CVECAN ID: CVE-2 0 1 5-7 8 7 1 Siemens RUGGEDCOM based on the ROX device for connection to the harsh environment of the equipment. Siemens RUGGEDCOM ROX-based devices exist authentication bypass vulnerability, by sending a configuration of...
Siemens RUGGEDCOM ROX-based devices NTP input validation Vulnerability, CVE-2 0 1 5-5 3 0 0-a vulnerability warning-the black bar safety net
Affected system: Siemens RUGGEDCOM ROX 2.9.0 Description: CVECAN ID: CVE-2 0 1 5-5 3 0 0 Siemens RUGGEDCOM based on the ROX device for connection to the harsh environment of the equipment. Siemens RUGGEDCOM ROX-based devices there is an input validation vulnerability, in some circumstances, by...
Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-064-01 Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability that was published March 5, 2015, on the NCCIC/ICS-CERT web site. The “GHOST”Further information about the GHOST vulnerability:...
Siemens Ruggedcom WIN Vulnerability
OVERVIEW IOActive has coordinated with Siemens regarding multiple vulnerabilities in the Ruggedcom WIN firmware. Siemens has produced firmware updates that mitigates these vulnerabilities. These vulnerabilities could be exploited remotely if there is network access to the affected service. AFFECT...
Siemens RUGGEDCOM ROS Information Disclosure Vulnerability
Siemens RuggedCom ROS and ROX-based devices are used for device connectivity in harsh environments, e.g. substations, traffic management chassis etc. An information disclosure vulnerability exists in Siemens RUGGEDCOM ROS versions prior to 4.2.1. Because the program fails to pad Ethernet frames...
CVE-2015-7836
Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame...
Design/Logic Flaw
Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame...