https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:55:49.587612+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2017-avi-059 certfr-2017-avi-059 — De multiples vulnérabilités ont été corrigées dans <span class="textit">SCADA Siemens RUGGEDCOM NMS</span>. Elles perme… 2026-10-03T09:55:49.671926+00:00 certfr-2017-avi-059 https://cve.radiocsirt.org/vuln/cnvd-2017-01836 cnvd-2017-01836 2026-10-03T09:55:49.671965+00:00 cnvd-2017-01836 https://cve.radiocsirt.org/vuln/euvd-2026-72441 EUVD-2026-72441 2026-10-03T09:55:49.671981+00:00 EUVD-2026-72441 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2683 fkie_cve-2017-2683 2026-10-03T09:55:49.671992+00:00

A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions.

 https://cve.radiocsirt.org/vuln/ghsa-3m6r-h6cf-6q8q GHSA-3m6r-h6cf-6q8q 2026-10-03T09:55:49.672020+00:00

A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions.

 https://cve.radiocsirt.org/vuln/gsd-2017-2683 gsd-2017-2683 2026-10-03T09:55:49.672036+00:00 gsd-2017-2683 https://cve.radiocsirt.org/vuln/icsa-17-059-01 ICSA-17-059-01 — Siemens RUGGEDCOM NMS 2026-10-03T09:55:49.672047+00:00

The web application (Ports 8080/TCP and 8081/TCP) could allow a remote attacker to perform a cross-site request forgery (CSRF) attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to trigger a malicious request.CVE-2017-2682 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). A non-privileged user of the web application (Ports 8080/TCP and 8081/TCP) could perform a persistent cross-site scripting (XSS) attack, potentially resulting in acquisition of administrative permissions.CVE-2017-2683 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N).