Cross-Site Scripting Vulnerability in Schneider Electric Modicon Quantum PLC
CVE-2012-0930

6.1MEDIUM

Key Information:

Vendor

Schneider Electric
Status
Modicon Quantum Plc
Vendor
CVE Published:
28 January 2012

What is CVE-2012-0930?

A cross-site scripting vulnerability exists in Schneider Electric's Modicon Quantum PLC. This flaw allows remote attackers to execute arbitrary web scripts or HTML code via unspecified vectors, potentially compromising system security. Users of affected products are advised to implement appropriate measures to secure their systems against possible exploitation of this vulnerability. Regular updates and monitoring are recommended to mitigate risks associated with this issue.

References

http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-0...
x_refsource_MISC
http://www.securityfocus.com/bid/51605
vdb-entryx_refsource_BID
http://secunia.com/advisories/47723
third-party-advisoryx_refsource_SECUNIA

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.