Cross site scripting

2023-04-1820:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

cwe-79

input neutralization

web page generation

session manipulation

netbotz 4

nvd

0.0005 Low

EPSS

Percentile

18.4%

JSON

A CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site
Scripting’) vulnerability exists that could cause code and session manipulation when malicious
code is inserted into the browser.

Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0

and prior)

CPENameOperatorVersion
netbotz_355_firmwarege4.0.0
netbotz_355_firmwarele4.7.0
netbotz_450_firmwarege4.0.0
netbotz_450_firmwarele4.7.0
netbotz_455_firmwarege4.0.0
netbotz_455_firmwarele4.7.0
netbotz_550_firmwarege4.0.0
netbotz_550_firmwarele4.7.0
netbotz_570_firmwarege4.0.0
netbotz_570_firmwarele4.7.0

Name	Operator	Version
netbotz_355_firmware	ge	4.0.0
netbotz_355_firmware	le	4.7.0
netbotz_450_firmware	ge	4.0.0
netbotz_450_firmware	le	4.7.0
netbotz_455_firmware	ge	4.0.0
netbotz_455_firmware	le	4.7.0
netbotz_550_firmware	ge	4.0.0
netbotz_550_firmware	le	4.7.0
netbotz_570_firmware	ge	4.0.0
netbotz_570_firmware	le	4.7.0

References

download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-312-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-312-01-NetBotz_4_Security_Notification.pdf

0.0005 Low

EPSS

Percentile

18.4%

JSON

Related for PRION:CVE-2022-43376