Cross site scripting

Cross-site scripting XSS vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4513

CVE-2016-4513 corresponds to a Cross-site Scripting (XSS) vulnerability in Schneider Electric PowerLogic PM8ECC module for PowerMeter 800 devices, fixed in firmware version 2.651. Affected product: PowerLogic PM8ECC (Series 800). Root cause: improper handling of input in the web interface enablin...

CVE-2016-4513: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-5994

Name of the Vulnerable Software and Affected Versions PowerLogic PM8ECC module version 2.651 and earlier for PowerMeter 800 devices Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to...

Schneider Electric PowerLogic PM8ECC Cross-Site Scripting Vulnerability

The Schneider Electric PowerLogic PM8ECC is a communication module for use in 800 series meters from Schneider Electric, France. A cross-site scripting vulnerability exists in the Schneider Electric PowerLogic PM8ECC using firmware prior to version 2.651. A remote attacker could exploit the...

Schneider Electric POWERLOGIC® EGX200 or EGX400 with firmware version 5.5 or higher 弱口令

No description provided by source...

Schneider Electric PowerLogic™ Series 800 Power Meter 弱口令

No description provided by source...

Schneider PowerLogic™ ION8*/7*/6* Energy and power meter 弱口令

No description provided by source...

Schneider Electric PowerLogicTM Ethernet Gateway EGX300/EGX100 弱口令

No description provided by source...

CVE-2013-2824

Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to...

CVE-2013-2824

CVE-2013-2824 affects Schneider Electric StruxureWare SCADA Expert Vijeo Citect (v7.40), Vijeo Citect (v7.20–7.30SP1), CitectSCADA (v7.20–7.30SP1), StruxureWare PowerSCADA Expert (v7.30–7.30SR1), and PowerLogic SCADA (v7.20–7.20SR1). The issue is an exception-handling flaw that allows remote atta...

PT-2014-2010

Name of the Vulnerable Software and Affected Versions Schneider Electric StruxureWare SCADA Expert Vijeo Citect versions 7.40 Schneider Electric Vijeo Citect versions 7.20 through 7.30SP1 Schneider Electric CitectSCADA versions 7.20 through 7.30SP1 Schneider Electric StruxureWare PowerSCADA Exper...

CVE-2013-2824: Undefined Security Weakness

Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to...

Xxe

Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an...

CVE-2013-2796

Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an...

CVE-2013-2796

This entry (CVE-2013-2796) describes an XML External Entity (XXE) vulnerability in Schneider Electric products: Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier. The underlying issue is improper restriction of XML entities, allowing a remote attac...

PT-2013-1316

Name of the Vulnerable Software and Affected Versions Schneider Electric Vijeo Citect versions 7.20 and earlier Schneider Electric CitectSCADA versions 7.20 and earlier Schneider Electric PowerLogic SCADA versions 7.20 and earlier Description The issue allows remote attackers to read arbitrary...

CVE-2013-2796: Undefined Security Weakness

Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an...