medium5.4
CVE-2015-6462
Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider El…
Impact
Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Bmxnoc0401 Firmware | All versions |
| Schneider-Electric | Bmxnoe0100 Firmware | All versions |
| Schneider-Electric | Bmxnoe0110 Firmware | All versions |
| Schneider-Electric | Bmxnoe0110h Firmware | All versions |
| Schneider-Electric | Bmxnor0200h Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmxp342020 Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmxp342020h Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmxp342030 Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmxp3420302 Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmxp3420302h Firmware | All versions |
| Schneider-Electric | Modicon M340 Bmxp342030h Firmware | All versions |