Description (CNA)
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains a reflected Cross-site Scripting (XSS) vulnerability that could allow an unauthenticated remote attacker to steal sensitive data or execute administrative actions on behalf of a legitimate administrator of the CCS web interface.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / Control Center Server (CCS) | affected All versions < V1.5.0 |
CWE
CWE-79
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
ADP enrichment
No English description supplied.