What is CVE-2017-2683?

CVE-2017-2683 is a high-severity vulnerability in Siemens Ruggedcom Network Management Software, classified under Cross-site Scripting. CVSS score: 8.2/10. Published 2017-02-27.

How severe is CVE-2017-2683?

High severity. CVSS v3 base score is 8.2 out of 10.

XSS in Siemens Ruggedcom Network Management Software

CVE-2017-2683

A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions.

Vulnerability class: XSS (Cross-Site Scripting)

Published 2017-02-27 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N.

EPSS exploit prediction

EPSS: 0.014 (71.7th percentile), scored 2026-10-07.

Low probability of exploitation in the next 30 days, but still tracked. 72nd percentile — 71.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.014 · newest: 0.014 · change: 0.000

Affected products

Siemens Ruggedcom Network Management Software
Ruggedcom Nms All Versions < V2.1 (Windows And Linux) — versions RUGGEDCOM NMS All versions < V2.1 (Windows and Linux)

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-363881.pdf (Vendor Advisory)
www.securityfocus.com/bid/96455 (vdb-entry)
ics-cert.us-cert.gov/advisories/ICSA-17-059-01
www.securitytracker.com/id/1037958 (vdb-entry)

Frequently asked questions

What is CVE-2017-2683?: CVE-2017-2683 is a high-severity vulnerability in Siemens Ruggedcom Network Management Software, classified under Cross-site Scripting. CVSS score: 8.2/10. Published 2017-02-27.
How severe is CVE-2017-2683?: High severity. CVSS v3 base score is 8.2 out of 10.