CVE-2017-2683

CVE-2017-2683 describes a persistent Cross-Site Scripting (XSS) vulnerability in Siemens RUGGEDCOM NMS versions prior to 1.2, affecting ports 8080/TCP and 8081/TCP. A non-privileged user could leverage this flaw, potentially leading to the compromise of administrative permissions. This vulnerability is rated as High severity with a CVSS score of 8.2, indicating a network-based attack with low complexity, requiring user interaction, and resulting in high confidentiality impact. While there is no evidence of active exploitation or publicly available exploit code (Metasploit, Nuclei, ExploitDB), the CVE has garnered some community discussion and media coverage, suggesting awareness within the cybersecurity community.