Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-726v-99qh-j9mj

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). The integrated configuration web server of the affected device could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known.

A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). The integrated configuration web server of the affected device could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known.

EPSS

Процентиль: 61%
0.00416
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-79
CWE-80

Связанные уязвимости

CVSS3: 9.6
nvd
больше 6 лет назад

A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). The integrated configuration web server of the affected device could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known.

CVSS3: 7.5
fstec
больше 6 лет назад

Уязвимость реализации протокола WirelessHART шлюза IE/WSN-PA Link, позволяющая нарушителю осуществлять межсайтовые сценарные атаки

EPSS

Процентиль: 61%
0.00416
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-79
CWE-80