Количество 3
Количество 3
CVE-2018-7810
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to craft a URL containing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running on.
GHSA-x8wg-64q8-6xh3
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to craft a URL containing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running on.
BDU:2019-00122
Уязвимость микропрограммного обеспечения программируемых логических контролеров Schneider Electric Modicon, связанная с недостаточной защитой структуры WEB-страницы, позволяющая нарушителю внедрить JavaScript, который будет выполняться в браузере пользователя
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-7810 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to craft a URL containing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running on. | CVSS3: 6.1 | 0% Низкий | около 7 лет назад |
| GHSA-x8wg-64q8-6xh3 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to craft a URL containing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running on. | CVSS3: 6.1 | 0% Низкий | больше 3 лет назад |
 | BDU:2019-00122 Уязвимость микропрограммного обеспечения программируемых логических контролеров Schneider Electric Modicon, связанная с недостаточной защитой структуры WEB-страницы, позволяющая нарушителю внедрить JavaScript, который будет выполняться в браузере пользователя | CVSS3: 6.1 | 0% Низкий | около 7 лет назад |
Уязвимостей на страницу