Cross site scripting

2023-06-1304:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

sensitive cookie

httponly flag

abb rex640 pcl1

abb rex640 pcl2

abb rex640 pcl3

firmware modules

xss

nvd

vulnerability

0.001 Low

EPSS

Percentile

19.9%

JSON

Sensitive Cookie Without ‘HttpOnly’ Flag vulnerability in ABB REX640 PCL1 (firmware modules), ABB REX640 PCL2 (Firmware modules), ABB REX640 PCL3 (firmware modules) allows Cross-Site Scripting (XSS).This issue affects REX640 PCL1: from 1.0;0 before 1.0.8; REX640 PCL2: from 1.0;0 before 1.1.4; REX640 PCL3: from 1.0;0 before 1.2.1.

CPENameOperatorVersion
rex640_pcl1_firmwarege1.0.0
rex640_pcl1_firmwarelt1.0.8
rex640_pcl2_firmwarege1.0.0
rex640_pcl2_firmwarelt1.1.4
rex640_pcl3_firmwarege1.0.0
rex640_pcl3_firmwarelt1.2.1

Name	Operator	Version
rex640_pcl1_firmware	ge	1.0.0
rex640_pcl1_firmware	lt	1.0.8
rex640_pcl2_firmware	ge	1.0.0
rex640_pcl2_firmware	lt	1.1.4
rex640_pcl3_firmware	ge	1.0.0
rex640_pcl3_firmware	lt	1.2.1