4517 matches found
CVE-2025-41747
CVE-2025-41747 describes an unauthenticated XSS vulnerability in the web interface component pxc_vlanIntfCfg.php that can fool an authenticated user into sending a manipulated POST request to modify device configuration parameters available through the web-based management interface (WBM). The is...
CVE-2025-41748 Reflected XSS vulnerability in pxc_Dot1xCfg.php
An XSS vulnerability in pxcDot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
CVE-2025-41749 Reflected XSS vulnerability in port_util.php
An XSS vulnerability in portutil.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
CVE-2025-41749
CVE-2025-41749 describes a reflected XSS in port_util.php. Multiple sources (NVD, Red Hat, EUVD, CVE List, VulnEnrichment, CIRCL) reiterate: an unauthenticated remote attacker can lure an authenticated user to click a crafted link to modify device configuration parameters via the web-based manage...
CVE-2025-41750 Reflected XSS vulnerability in pxc_PortCfg.php
An XSS vulnerability in pxcPortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
CVE-2025-41750
CVE-2025-41750 is a reflected XSS in the web interface page pxc_PortCfg.php affecting Phoenix Contact FL SWITCH prior to version 3.50 . An unauthenticated attacker can lure an authenticated user to click a malicious link, enabling changes to device configuration parameters via the web-based manag...
CVE-2025-41750 Reflected XSS vulnerability in pxc_PortCfg.php
An XSS vulnerability in pxcPortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
CVE-2025-41751 Reflected XSS vulnerability in pxc_portCntr.php
An XSS vulnerability in pxcportCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
CVE-2025-41752 Reflected XSS vulnerability in pxc_portSfp.php
An XSS vulnerability in pxcportSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
CVE-2025-65228
A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. Elettronica TLK302T telemetry controller firmware 1.5.1799...
PT-2025-49814
An XSS vulnerability in dyn conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
PT-2025-49818
An XSS vulnerability in pxc portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to...
PT-2025-49820
An XSS vulnerability in pxc Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
PT-2025-49819
An XSS vulnerability in pxc vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to...
CVE-2025-65228
A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. Elettronica TLK302T telemetry controller firmware 1.5.1799...
CVE-2025-65228
A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. Elettronica TLK302T telemetry controller firmware 1.5.1799...
PT-2025-49595
Name of the Vulnerable Software and Affected Versions R.V.R. Elettronica TLK302T telemetry controller version 1.5.1799 Description A stored cross-site scripting issue exists in the web management interface. This allows for the injection of malicious scripts that can be executed in the context of...
R.V.R. Elettronica TLK302T 安全漏洞
The R.V.R. Elettronica TLK302T is a telemetry control system from R.V.R. Elettronica, Italy. A security vulnerability exists in the R.V.R. Elettronica TLK302T that originates from the presence of stored cross-site scripting in the web management interface...
EUVD-2025-200298
The Iskra iHUB and iHUB Lite smart metering gateway exposes its web management interface without requiring authentication, allowing unauthenticated users to access and modify critical device settings...