PT-2017-8780 · Visonic · Visonic Powerlink2

Aditya K. Sood · Published 2017-02-13 · Updated 2021-09-09 · CVE-2016-5811

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Visonic PowerLink2 versions prior to October 2016 firmware release

Description An issue was discovered where user-controlled input is not neutralized prior to being placed in web page output, leading to a CROSS-SITE SCRIPTING issue.

Recommendations For versions prior to the October 2016 firmware release, update to the October 2016 firmware release or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-5811

Affected Products

Visonic Powerlink2

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-5811 · Security Note
• http://securityfocus.com/bid/94894 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-348-01 · Note