Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-3073

Quaonos Schema ST4 example templates prone to XSS

Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack existing sessions to e.g. other web services in the same environment or execute scripts in the users browser environment. The affected script is '*-schema.js'.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Weidmueller
Products
19 Iot Md01 Lan H4 S0011 19 Iot Md01 Lan H4 S0011 Firmware Fp Iot Md01 4eu S2 00000 and 15 more
CVE-2021-20999

WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways

In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Weidmueller
Products
Iot-gw30 Iot-gw30-4g-eu Iot-gw30-4g-eu Firmware and 5 more