CVE-2022-40190 — SAUTER Controls / moduWeb

CVE-2022-40190

SAUTER Controls / moduWeb PUBLISHED

Description (CNA)

SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS). The web application does not adequately sanitize request strings of malicious JavaScript. An attacker utilizing XSS could then execute malicious code in users’ browsers and steal sensitive information, including user credentials.

Affected (CNA)

Vendor / product	Versions
SAUTER Controls / moduWeb	affected firmware Version 2.7.1

CWE

CWE-79

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-300-02

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-300-02

CISA-ADP

No English description supplied.

No references supplied.