Cross-site scripting (XSS) vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
Link | Resource |
---|---|
http://secunia.com/advisories/44955 | Third Party Advisory |
http://www.digitalbond.com/scadapedia/vulnerability-notes/control-microsystems-cross-site-scripting-vulnerability/ | Third Party Advisory |
http://www.osvdb.org/72987 | Broken Link |
http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdf | Patch Third Party Advisory US Government Resource |
http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdf | Patch Third Party Advisory US Government Resource |
http://secunia.com/advisories/44955 | Third Party Advisory |
http://www.digitalbond.com/scadapedia/vulnerability-notes/control-microsystems-cross-site-scripting-vulnerability/ | Third Party Advisory |
http://www.osvdb.org/72987 | Broken Link |
http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdf | Patch Third Party Advisory US Government Resource |
http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdf | Patch Third Party Advisory US Government Resource |
Configurations
History
21 Nov 2024, 01:29
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/44955 - Third Party Advisory | |
References | () http://www.digitalbond.com/scadapedia/vulnerability-notes/control-microsystems-cross-site-scripting-vulnerability/ - Third Party Advisory | |
References | () http://www.osvdb.org/72987 - Broken Link | |
References | () http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdf - Patch, Third Party Advisory, US Government Resource | |
References | () http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdf - Patch, Third Party Advisory, US Government Resource |
Information
Published : 2011-08-16 21:55
Updated : 2024-11-21 01:29
NVD link : CVE-2011-3144
Mitre link : CVE-2011-3144
CVE.ORG link : CVE-2011-3144
JSON object : View
Products Affected
schneider-electric
- scx_68
- scx_67
aveva
- clearscada
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')