medium6.1
CVE-2019-6853
A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and …
Impact
A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702) , which could enable a successful Cross-site Scripting (XSS attack) when using the products web server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Andover Continuum 9680 Firmware | All versions |
| Schneider-Electric | Andover Continuum 5740 Firmware | All versions |
| Schneider-Electric | Andover Continuum 5720 Firmware | All versions |
| Schneider-Electric | Andover Continuum Bcx4040 Firmware | All versions |
| Schneider-Electric | Andover Continuum Bcx9640 Firmware | All versions |
| Schneider-Electric | Andover Continuum 9900 Firmware | All versions |
| Schneider-Electric | Andover Continuum 9940 Firmware | All versions |
| Schneider-Electric | Andover Continuum 9941 Firmware | All versions |
| Schneider-Electric | Andover Continuum 9924 Firmware | All versions |
| Schneider-Electric | Andover Continuum 9702 Firmware | All versions |
| Schneider-Electric | Andover Continuum 9200 Firmware | All versions |