PT-2016-5994 · Schneider Electric · Powermeter 800+1

Publicado 2016-06-26 · Atualizado 2016-06-28 · CVE-2016-4513

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PowerLogic PM8ECC module version 2.651 and earlier for PowerMeter 800 devices

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized access or control of the affected devices.

Recommendations For PowerLogic PM8ECC module version 2.651 and earlier, update to version 2.651 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-4513

Produtos afetados

Powerlogic Pm8Ecc

Powermeter 800

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-4513 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-16-173-02 · Nota
• https://osv.dev/vulnerability/CVE-2016-4513 · Aviso do Fabricante