ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2017-16723

—
CVSS 3.0
6.1 medium
EPSS
2%p82
Published
()
Modified
Description

A Cross-site Scripting issue was discovered in PHOENIX CONTACT FL COMSERVER BASIC 232/422/485, FL COMSERVER UNI 232/422/485, FL COMSERVER BAS 232/422/485-T, FL COMSERVER UNI 232/422/485-T, FL COM SERVER RS232, FL COM SERVER RS485, and PSI-MODEM/ETH (running firmware versions prior to 1.99, 2.20, or 2.40). The cross-site scripting vulnerability has been identified, which may allow remote code execution.

Vendors
phoenixcontact
Products
fl comserver basic 232 firmware, fl comserver uni 422 firmware, fl comserver bas 485-t firmware, fl com server rs232 firmware, fl com server rs485 firmware, psi-modem\/eth firmware, fl comserver basic 422 firmware, fl comserver basic 485 firmware, fl comserver uni 485-t firmware, fl comserver uni 485 firmware, fl comserver uni 232 firmware, fl comserver bas 422 firmware
Weakness
CWE-79
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news

No ingested article mentions this CVE yet.