Siemens OZW672 and OZW772 Cross-Site Scripting Vulnerabilities

Siemens OZW672 and OZW772 are both building controller products from Siemens, Germany. A cross-site scripting vulnerability exists in the Siemens OZW672 and OZW772 devices. A remote attacker could exploit the vulnerability to alter data and settings...