CWE Code: 79
Vulnerability Type: privilege_escalation
CVSS Score: 4.3
CWE Name:  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary: a non-privileged user of the siemens web application ruggedcom nms < v1.2 on port 8080/tcp and 8081/tcp could perform a persistent cross-site scripting (xss) attack, potentially resulting in obtaining administrative permissions.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2017-02-27
Last Modified Date: 2017-07-17