Cross-site scripting (XSS) vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
Link | Resource |
---|---|
http://secunia.com/advisories/44955 | Third Party Advisory |
http://www.digitalbond.com/scadapedia/vulnerability-notes/control-microsystems-cross-site-scripting-vulnerability/ | Third Party Advisory |
http://www.osvdb.org/72987 | Broken Link |
http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdf | Patch Third Party Advisory US Government Resource |
http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdf | Patch Third Party Advisory US Government Resource |
Configurations
History
No history.
Information
Published : 2011-08-16 21:55
Updated : 2024-02-28 11:41
NVD link : CVE-2011-3144
Mitre link : CVE-2011-3144
CVE.ORG link : CVE-2011-3144
JSON object : View
Products Affected
schneider-electric
- scx_67
- scx_68
aveva
- clearscada
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')