Schneider Electric PowerLogic ION8650,ION8800 Cross-site Scripting (CVE-2023-5985)

A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise of a user's browser when an attacker with admin privileges has modified system values. This plugin only works with Tenable.ot. Please visit...

CVE-2023-5985

A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise of a user’s browser when an attacker with admin privileges has modified system values...

CVE-2023-5985

CVE-2023-5985 affects Schneider Electric PowerLogic ION8650 and ION8800 (industrial OT meters). The vulnerability is described as CWE-79: Improper Neutralization of Input During Web Page Generation, enabling an attacker with administrative privileges who has modified system values to cause a user...