Lucene search

[email protected]CVE-2011-4510

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-4510

2022-10-0316:15:15

CWE-79

[email protected]

web.nvd.nist.gov

cve-2011-4510

cross-site scripting

xss vulnerability

siemens

wincc flexible

tia portal

nvd

security advisory

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.4%

JSON

Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4511.

Affected configurations

NVD

Node

siemenswincc_flexibleMatch2004

siemenswincc_flexibleMatch2005

siemenswincc_flexibleMatch2007

siemenswincc_flexibleMatch2008

siemenswincc_flexibleMatch2008sp1

siemenswincc_flexibleMatch2008sp2

Node

siemenswinccRange≤v11sp2

siemenswinccMatchv11

siemenswinccMatchv11sp1

Node

siemenssimatic_hmi_panelsMatchcomfort_panels

siemenssimatic_hmi_panelsMatchmobile_panels

siemenssimatic_hmi_panelsMatchmp

siemenssimatic_hmi_panelsMatchop

siemenssimatic_hmi_panelsMatchtp

Node

siemenswincc_runtime_advancedMatchv11

Node

siemenswincc_flexible_runtime

CPENameOperatorVersion
siemens:wincc_flexiblesiemens wincc flexibleeq2004
siemens:wincc_flexiblesiemens wincc flexibleeq2005
siemens:wincc_flexiblesiemens wincc flexibleeq2007
siemens:wincc_flexiblesiemens wincc flexibleeq2008

CPE	Name	Operator	Version
siemens:wincc_flexible	siemens wincc flexible	eq	2004
siemens:wincc_flexible	siemens wincc flexible	eq	2005
siemens:wincc_flexible	siemens wincc flexible	eq	2007
siemens:wincc_flexible	siemens wincc flexible	eq	2008