description: A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions.
problem types: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
product: RUGGEDCOM NMS All versions < V2.1 (Windows and Linux)
vendor: n/a
versions:
status: affected, version: RUGGEDCOM NMS All versions < V2.1 (Windows and Linux)
}