ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-6853

—
CVSS 3.1
6.1 medium
EPSS
<1%p49
Published
()
Modified
Description

A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702) , which could enable a successful Cross-site Scripting (XSS attack) when using the products web server.

Vendors
schneider-electric
Products
andover continuum 9680 firmware, andover continuum 5740 firmware, andover continuum 5720 firmware, andover continuum bcx4040 firmware, andover continuum bcx9640 firmware, andover continuum 9900 firmware, andover continuum 9940 firmware, andover continuum 9941 firmware, andover continuum 9924 firmware, andover continuum 9702 firmware, andover continuum 9200 firmware
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news

No ingested article mentions this CVE yet.