CVE-2016-1488

Summary: CVE-2016-1488 is a cross-site scripting (XSS) vulnerability in the login form of Siemens OZW672/OZW772 devices. Root cause: the web server’s login input is not properly sanitized, enabling injection of arbitrary script/HTML via a crafted URL. Impact: allows remote attackers to alter data...