Siemens SCALANCE M875 Cross-site Scripting (CVE-2018-11448)

A vulnerability has been identified in SCALANCE M875 All versions. The web interface on port 443/tcp could allow a stored Cross-Site Scripting XSS attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires that the attacker has access to the web...

CVE-2018-11448

CVE-2018-11448 affects Siemens SCALANCE M875 (All versions). The vulnerability is a stored Cross-Site Scripting (XSS) in the web interface on port 443/tcp. Exploitation requires access to the affected device’s web interface and authenticated administrative privileges; a legitimate user must subse...