Cross-Site Scripting Vulnerability in Schneider Electric's Network Management Cards
CVE-2021-22812

6.1MEDIUM

Key Information:

Vendor
Schneider Electric
Status
Network Management Card 2 Firmware
Vendor
CVE Published:
28 January 2022

Summary

A cross-site scripting vulnerability exists in Schneider Electric's Network Management Cards, which allows an attacker to execute arbitrary scripts if a privileged user clicks on a specially crafted malicious URL. This can compromise the integrity of the web application and may lead to unauthorized access to sensitive information.

References

https://download.schneider-electric.com/files?p_Doc_Ref=S...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.