Eaton 5P Cross-site Scripting (CVE-2020-7915)

An issue was discovered on Eaton 5P 850 devices. The Ubicacion SAI field allows XSS attacks by an administrator. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

CVE-2020-7915

CVE-2020-7915 affects Eaton 5P 850 devices, where the Ubicacion SAI field allows an XSS attack by an administrator. Metrics show CVSSv3.1 base score 4.8 (Network, Low confidentiality/Integrity impact; Authentication required; Changed scope) and CVSSv2 base score 3.5 (Network, Partial integrity im...