CVE-2023-5986

🗓️ 15 Nov 2023 03:47:17Reported by schneiderType

URL Redirection vulnerability leading to Cross Site Scripting attack

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the software used for creating control panels for energy management systems, namely EcoStruxure PowerSCADA Operation (PSO) – Advanced Reporting and Dashboards Module, EcoStruxure PowerOperation (EPO) – Advanced Reporting and Dashboards Module, and the energy monitoring software EcoStruxure Power Monitoring Expert, stems from the redirection of URLs to an unreliable website. This allows a hacker to redirect users to any arbitrary URL address.	15 Nov 202300:00	–	bdu_fstec
CNNVD	Schneider Electric EcoStruxure Power Monitoring Expert 输入验证错误漏洞	15 Nov 202300:00	–	cnnvd
CNVD	Schneider Electric EcoStruxure Power Monitoring Expert Open Redirection Vulnerability	21 Nov 202300:00	–	cnvd
CVE	CVE-2023-5986	15 Nov 202303:47	–	cve
EUVD	EUVD-2023-58253	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5986	15 Nov 202304:15	–	nvd
OSV	CVE-2023-5986	15 Nov 202304:15	–	osv
Prion	Cross site scripting	15 Nov 202304:15	–	prion
Positive Technologies	PT-2023-6877 · Schneider Electric · Ecostruxure Power Monitoring Expert +2	14 Nov 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-5986	15 Nov 202303:47	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "product": "EcoStruxure Power Monitoring Expert (PME)",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Version 2020 CU2 and prior"
      },
      {
        "status": "affected",
        "version": "Version 2021 CU1 and prior"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EcoStruxure Power Operation (EPO) – Advanced Reporting and Dashboards Module",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Advanced Reporting and Dashboards Module 2021 prior to CU2 for EcoStruxure Power Operation 2021"
      },
      {
        "status": "affected",
        "version": "Advanced Reporting and Dashboards Module 2020 prior to CU3"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EcoStruxure Power SCADA Operation (PSO) - Advanced Reporting and Dashboards Module",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "EcoStruxure Power SCADA Operation (PSO) 2020 or 2020 R2"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

15 Nov 2023 03:47Current

8High risk

Vulners AI Score8

CVSS 3.18.2

EPSS0.00174

CWE-601