Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SDM Web interface vulnerable to XSS
Vulnerability Description
A reflected cross-site scripting (XSS) vulnerability exists in the SVG version of System Diagnostics Manager of B&R Automation Runtime versions <= G4.93 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user’s browser session.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
B&R Industrial Automation GmbH Runtime 跨站脚本漏洞
Vulnerability Description
B&R Industrial Automation GmbH Runtime是奥地利贝加莱工业自动化（B&R Industrial Automation）公司的是AS的主要组件。 B&R Industrial Automation GmbH Runtime G4.93及之前版本存在跨站脚本漏洞，该漏洞源于允许远程攻击者在被攻击用户的浏览器会话的上下文中执行任意 JavaScript 代码。
CVSS Information
N/A
Vulnerability Type
N/A