PT-2015-7264 · Nordex · Nordex Control 2 (Nc2) Scada+1
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Nordex Control 2 (NC2) SCADA versions 16 and earlier
Description
The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Recommendations
For versions 16 and earlier, update to a version later than 16 to resolve the issue.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Nordex Control 2 (Nc2) Scada
Wind Farm Portal