Siemens Climatix 弱口令漏洞

No description provided by source...

Siemens Climatix BACnet/IP Communication Module Multiple Vulnerabilities (SSA-142512)

Siemens Climatix BACnet/IP Communication Module is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Climatix BACnet/IP Communication Module Cross Site Scripting

I. VULNERABILITIES ------------------------- 1. Reflected XSS Attack vulnerability in Climatix BACnet/IP communication module from Siemens 2. Unrestricted upload of files II. BACKGROUND ------------------------- BACnet/IP communication modules help to integrate controller types POL6XX of the...

Siemens Climatix BACnet/IP Communication Module Cross-Site Scripting Vulnerability

The Siemens Climatix BACnet/IP communication module is a communication module for BACnet networks from Siemens, Germany. A cross-site scripting vulnerability exists in the integrated web server in the Siemens Climatix BACnet/IP communication module using firmware versions prior to 10.34. A remote...

CVE-2015-4174

Cross-site scripting XSS vulnerability in the integrated web server on the Siemens Climatix BACnet/IP communication module with firmware before 10.34 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the integrated web server on the Siemens Climatix BACnet/IP communication module with firmware before 10.34 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-4174

Siemens Climatix BACnet/IP Communication Module contains a Cross-site scripting (XSS) vulnerability in its integrated web server. Affects firmware versions prior to 10.34; an attacker can inject arbitrary web script or HTML via a crafted URL, potentially impacting web-page integrity of the module...

CVE-2015-4174

Cross-site scripting XSS vulnerability in the integrated web server on the Siemens Climatix BACnet/IP communication module with firmware before 10.34 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Siemens Climatix BACnet/IP Communication Module Cross-site Scripting Vulnerability

OVERVIEW Siemens has identified a cross-site scripting XSS vulnerability in its Climatix BACnet/IP communication module. This vulnerability was reported directly to Siemens by Juan Francisco Bolivar Hernandez. Siemens has produced a new firmware update to mitigate this vulnerability. This...