Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM module) (All versions < V11.36). The User Management page of affected devices is vulnerable to cross-site scripting (XSS). The vulnerability allows an attacker to send malicious JavaScript code which could result in hijacking of the user's cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser action.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Climatix POL909 跨站脚本漏洞
Vulnerability Description
Siemens Climatix Pol909是德国西门子（Siemens）公司的一个智能网络模块。 Climatix POL909的AWB模块11.44之前版本 以及 Climatix POL909的AWM模块11.36之前版本存在安全漏洞，该漏洞源于受影响设备的User Management页面容易受到跨站点脚本攻击。该漏洞允许攻击者发送恶意 JavaScript 代码，导致劫持用户的 cookie或session，将用户重定向到恶意网页并执行意外的浏览器操作。
CVSS Information
N/A
Vulnerability Type
N/A