漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authentication information of an MC Works64 or MobileHMI and perform any operation using the acquired authentication information, by injecting a malicious script in the URL of a monitoring screen delivered from the MC Works64 server or MobileHMI server to an application for mobile devices and leading a legitimate user to access this URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mitsubishi Electric MC Works64 跨站脚本漏洞
Vulnerability Description
Mitsubishi Electric MC Works64是日本三菱电机(Mitsubishi Electric)公司的一套数据采集与监控系统(SCADA)。 Mitsubishi Electric MC Works64 存在跨站脚本漏洞,该漏洞源于产品在向客户端呈现页面时,对用户输入和外部数据缺乏适当的验证检查。
CVSS Information
N/A
Vulnerability Type
N/A