Lucene search
K

8 matches found

BDU FSTEC
BDU FSTEC
added 2021/08/03 12:0 a.m.1 views

The vulnerability of the building management software (management of access control, security systems, video surveillance, and automation) in Andover Continuum arises from the lack of measures to protect input data. This allows intruders to perform cross-site scripting attacks (XSS).

The vulnerability of the building management software management of access control, security systems, video surveillance, and automation in Andover Continuum is related to the lack of measures for cleaning input data. Exploiting this vulnerability could allow a remote attacker to perform cross-si...

6.1CVSS6.1AI score0.00641EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/30 12:0 a.m.2 views

The vulnerability of the building management software (management of access control, security systems, video surveillance, and automation) Andover Continuum System, related to the lack of protection for website structures, allows attackers to execute cross-site scripting attacks (XSS attacks) during the use of web server applications.

The vulnerability of the building management software managing access control, security systems, video surveillance, and automation in Andover Continuum System is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to...

6.1CVSS6.4AI score0.00776EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/30 12:0 a.m.2 views

The vulnerability of the building management software (management of access control, security systems, video surveillance, and automation) Andover Continuum System, related to the lack of protection for website structures, allows attackers to execute cross-site scripting attacks (XSS attacks) during the use of web server applications.

The vulnerability of the building management software management of access control, security systems, video surveillance, and automation in Andover Continuum System is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious act...

6.1CVSS6.4AI score0.00773EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/30 12:0 a.m.3 views

The vulnerability of the building management software (management of access control, security systems, video surveillance, and automation) Andover Continuum System, related to the possibility of interference with XML data processing by the application, allows a intruder to gain access to the files in the application server’s file system.

The vulnerability of the building management software management of access control, security systems, video surveillance, and automation Andover Continuum System is related to the possibility of interference with XML data processing by the application. Exploiting this vulnerability can allow a...

10CVSS7.8AI score0.01498EPSS
Exploits0References3
CNVD
CNVD
added 2020/03/24 12:0 a.m.3 views

Andover Continuum Code Injection Vulnerability

Andover Continuum is a BACnet building management system from Schneider Electric. A code injection vulnerability exists in Andover Continuum. The vulnerability stems from improper control over code generation. An attacker could use this vulnerability to read files on the application server file...

9.8CVSS7.4AI score0.01498EPSS
Exploits0References1
CNVD
CNVD
added 2020/03/24 12:0 a.m.2 views

Andover Continuum Cross-Site Scripting Vulnerability

Andover Continuum is a BACnet building management system from Schneider Electric. A reflected cross-site scripting vulnerability exists in Andover Continuum. The vulnerability stems from improper neutralization of inputs during web page generation. An attacker could exploit this vulnerability to...

6.1CVSS6.2AI score0.00776EPSS
Exploits0References1
CNVD
CNVD
added 2020/03/24 12:0 a.m.0 views

Andover Continuum Cross-Site Scripting Vulnerability (CNVD-2020-19526)

Andover Continuum is a BACnet building management system from Schneider Electric. A cross-site scripting vulnerability exists in Andover Continuum. The vulnerability stems from improper neutralization of inputs during web page generation. An attacker could exploit this vulnerability to conduct a...

6.1CVSS6.2AI score0.00773EPSS
Exploits0References1
CNVD
CNVD
added 2020/03/24 12:0 a.m.3 views

Schneider Electric Andover Continuum Cross-Site Scripting Vulnerability

Schneider Electric Andover Continuum is a suite of building automation solutions from the French company Schneider Electric. The product includes features such as heating ventilation and air conditioning and access control. A cross-site scripting vulnerability exists in Schneider Electric Andover...

6.1CVSS6.3AI score0.00773EPSS
Exploits0References1
Rows per page
Query Builder