Description (CNA)
A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Certec EDV GmbH atvise scada | affected Certec EDV GmbH atvise scada |
CWE
CWE-644
References
ADP enrichment
No English description supplied.