Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in SCALANCE S602 (All versions < V4.0.1.1), SCALANCE S612 (All versions < V4.0.1.1), SCALANCE S623 (All versions < V4.0.1.1), SCALANCE S627-2M (All versions < V4.0.1.1). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known.
CVSS Information
N/A
Vulnerability Type
Web页面中脚本相关HTML标签转义处理不恰当(基本跨站脚本)
Vulnerability Title
多款Siemens产品跨站脚本漏洞
Vulnerability Description
Siemens SCALANCE S602等都是德国西门子（Siemens）公司的以太网安全模块。 多款Siemens产品中存在跨站脚本漏洞。远程攻击者可借助恶意的链接利用该漏洞注入任意的脚本。以下产品和版本受到影响：Siemens SCALANCE S602 4.0.1.1之前版本；SCALANCE S612 4.0.1.1之前版本；SCALANCE S623 4.0.1.1之前版本；SCALANCE S627-2M 4.0.1.1之前版本。
CVSS Information
N/A
Vulnerability Type
N/A