Description (CNA)
An low privileged remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into several fields of the configuration webpage with limited impact.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Wiesemann & Theis / ERP-Gateway 12x Digital Input, 6x Digital Relais | affected all |
| Wiesemann & Theis / ERP-Gateway 2x Digital Input, 2x Digital Output | affected all |
| Wiesemann & Theis / ERP-Gateway 2x Digital PoE | affected all |
| Wiesemann & Theis / Web-Alarm 6x6 DigitalWeb-Alarm 6x6 Digital | affected all |
| Wiesemann & Theis / Web-Count 6x Digital | affected 0 before 3.79 |
| Wiesemann & Theis / Web-Graph Air Quality | affected all |
| Wiesemann & Theis / Web-IO 12x Digital Input, 6x Digital Relais | affected all |
| Wiesemann & Theis / Web-IO 12x Digital Input, 6x Digital Relais | affected all |
| Wiesemann & Theis / Web-IO 12x Digital Input, 6x Digital Relais | affected all |
| Wiesemann & Theis / Web-IO Analog-In/Out 2x 0/4..20mA PoE | affected all |
| Wiesemann & Theis / Web-IO Digital 12xIn, 12xOut | affected all |
| Wiesemann & Theis / Web-IO Digital 12xIn, 12xOut | affected all |
| Wiesemann & Theis / Web-IO Digital 12xIn, 12xOut | affected 0 before 4.08 |
| Wiesemann & Theis / Web-IO Digital 12xIn, 12xOut, 1xRS232 | affected all |
| Wiesemann & Theis / Web-IO Digital 12xIn, 12xOut, 1xRS232 | affected all |
| Wiesemann & Theis / Web-IO Digital 2xIn, 2xOut | affected all |
| Wiesemann & Theis / Web-IO Digital 2xIn, 2xOut | affected all |
| Wiesemann & Theis / Web-IO Digital 2xIn, 2xOut | affected all |
| Wiesemann & Theis / Web-IO Digital Logger 6xIn, 6xOut | affected 0 before 3.70 |
| Wiesemann & Theis / Web-Thermograph 2x | affected all |
| Wiesemann & Theis / Web-Thermograph 8x | affected all |
| Wiesemann & Theis / Web-Thermograph NTC | affected all |
| Wiesemann & Theis / Web-Thermograph NTC PoE | affected all |
| Wiesemann & Theis / Web-Thermograph Pt100 / Pt1000 | affected all |
| Wiesemann & Theis / Web-Thermograph Pt100 / Pt1000 PoE | affected all |
| Wiesemann & Theis / Web-Thermograph Relais | affected all |
| Wiesemann & Theis / Web-Thermo-Hygrobarograph | affected all |
| Wiesemann & Theis / Web-Thermo-Hygrograph | affected all |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.