Lucene search

K
nessusThis script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500137.NASL
HistoryNov 08, 2019 - 12:00 a.m.

Siemens Simatic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
6

0.003 Low

EPSS

Percentile

66.2%

Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

File data ot_500137.nasl
VendorProductVersionCPE
siemenssimatic_s7-1500_cpu_firmware1.0.1cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:1.0.1:*:*:*:*:*:*:*
siemenssimatic_s7-1500_cpu_firmware1.1.0cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:1.1.0:*:*:*:*:*:*:*
siemenssimatic_s7-1500_cpu_firmware1.1.1cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:1.1.1:*:*:*:*:*:*:*
siemenssimatic_s7-1500_cpu_firmware*cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:*

0.003 Low

EPSS

Percentile

66.2%