medium6.1
CVE-2020-7482
A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), which coul…
Impact
A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), which could cause a Reflective Cross-site Scripting (XSS attack) when using the products' web server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Andover Continuum 9680 Firmware | All versions |
| Schneider-Electric | Andover Continuum 5740 Firmware | All versions |
| Schneider-Electric | Andover Continuum 5720 Firmware | All versions |
| Schneider-Electric | Andover Continuum Bcx4040 Firmware | All versions |
| Schneider-Electric | Andover Continuum Bcx9640 Firmware | All versions |
| Schneider-Electric | Andover Continuum 9900 Firmware | All versions |
| Schneider-Electric | Andover Continuum 9940 Firmware | All versions |
| Schneider-Electric | Andover Continuum 9941 Firmware | All versions |
| Schneider-Electric | Andover Continuum 9924 Firmware | All versions |
| Schneider-Electric | Andover Continuum 9702 Firmware | All versions |
| Schneider-Electric | Andover Continuum 9200 Firmware | All versions |