CVE-2015-6462

2019-03-2118:44:47

CWE-79

icscert

www.cve.org

0.001 Low

EPSS

Percentile

22.7%

JSON

Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser.

CNA Affected

[
  {
    "product": "Schneider Electric Modicon PLC",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H."
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-15-246-02

0.001 Low

EPSS

Percentile

22.7%

JSON

Related for CVELIST:CVE-2015-6462