Cross site scripting

2023-12-0415:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

webserver vulnerability

rtu500 series

improper sanitization

nvd

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

A vulnerability exists in the webserver that affects the
RTU500 series product versions listed below. A malicious
actor could perform cross-site scripting on the webserver
due to an RDT language file being improperly sanitized.

CPENameOperatorVersion
rtu520_firmwarege12.0.1
rtu520_firmwarele12.0.14
rtu520_firmwarege12.2.1
rtu520_firmwarele12.2.11
rtu520_firmwarege12.4.1
rtu520_firmwarele12.4.11
rtu520_firmwarege12.6.1
rtu520_firmwarele12.6.9
rtu520_firmwarege12.7.1
rtu520_firmwarele12.7.6

Name	Operator	Version
rtu520_firmware	ge	12.0.1
rtu520_firmware	le	12.0.14
rtu520_firmware	ge	12.2.1
rtu520_firmware	le	12.2.11
rtu520_firmware	ge	12.4.1
rtu520_firmware	le	12.4.11
rtu520_firmware	ge	12.6.1
rtu520_firmware	le	12.6.9
rtu520_firmware	ge	12.7.1
rtu520_firmware	le	12.7.6