Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Phoenix Contact: FL MGUARD XSS through web-based management and REST API
Vulnerability Description
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Phoenix Contact Fl Mguard 1102 跨站脚本漏洞
Vulnerability Description
Phoenix Contact Fl Mguard 1102是德国Phoenix Contact公司的一个安全路由器。用于保护工业网络免受 Ip 欺骗、拒绝服务 (Dos) 和 Syn 泛洪等攻击。 Phoenix Contact FL MGUARD 1102 和 1105 中存在跨站脚本漏洞，具有高权限的用户可以通过基于 Web 的管理或带有操纵证书文件的 REST API 注入 HTML 代码 (XSS)。
CVSS Information
N/A
Vulnerability Type
N/A