PT-2012-4123

CVE-2012-2595

Publicado

2012-06-08

Atualizado

2012-06-12

Descrição por

CVSS 2.0

4.3

Média

MétricasAV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Siemens WinCC version 7.0 SP3 before Update 2

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in unspecified web applications. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via vectors involving special characters in parameters.

Recommendations For Siemens WinCC version 7.0 SP3 before Update 2, apply Update 2 to resolve the issue.

Explorabilidade

Correção

Impactos

Pesquisadores

Dmitry Serebryannikov

Sergey Bobrov

Sergey Shcherbel