PT-2017-8780 · Visonic · Visonic Powerlink2

Aditya K. Sood · Publicado 2017-02-13 · Atualizado 2021-09-09 · CVE-2016-5811

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Visonic PowerLink2 versions prior to October 2016 firmware release

Description An issue was discovered where user-controlled input is not neutralized prior to being placed in web page output, leading to a CROSS-SITE SCRIPTING issue.

Recommendations For versions prior to the October 2016 firmware release, update to the October 2016 firmware release or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-5811

Produtos afetados

Visonic Powerlink2

Referências · 3

• http://securityfocus.com/bid/94894 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-16-348-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-5811 · Nota de Segurança