Cross-Site Scripting Vulnerability in Sauter ModuWEB Vision
CVE-2015-7916

6.5MEDIUM

Key Information:

Vendor

Sauter-controls

Status
Moduweb Vision
Vendor
CVE Published:
6 February 2016

What is CVE-2015-7916?

The Sauter ModuWEB Vision platform, prior to version 1.6.0, contains a Cross-Site Scripting (XSS) vulnerability that enables remote authenticated users to inject arbitrary web scripts or HTML. This flaw can lead to unauthorized access to sensitive data, session hijacking, and execution of malicious commands within the context of the user session.

References

http://seclists.org/fulldisclosure/2016/Feb/25
mailing-listx_refsource_FULLDISC
https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.