PT-2023-14154 · B&R · B&R Automation Runtime
CVE-2022-4286
·
Publicado
2023-02-14
·
Atualizado
2023-02-22
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
B&R Automation Runtime versions 3.00 through C4.93
Description
A reflected cross-site scripting issue exists in the System Diagnostics Manager, allowing a remote attacker to execute arbitrary JavaScript in the context of the user's browser session.
Recommendations
For versions 3.00 through C4.93, update to a version outside of this range to resolve the issue.
As a temporary workaround, consider restricting access to the System Diagnostics Manager to minimize the risk of exploitation.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
B&R Automation Runtime