medium6.1
CVE-2022-3073
Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote…
Impact
Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack existing sessions to e.g. other web services in the same environment or execute scripts in the users browser environment. The affected script is '*-schema.js'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Weidmueller | 19 Iot Md01 Lan H4 S0011 Firmware | All versions |
| Weidmueller | Fp Iot Md01 4eu S2 00000 Firmware | All versions |
| Weidmueller | Fp Iot Md01 Lan S2 00000 Firmware | All versions |
| Weidmueller | Fp Iot Md01 Lan S2 00011 Firmware | All versions |
| Weidmueller | Fp Iot Md02 4eu S3 00000 Firmware | All versions |
| Weidmueller | Iot-Gw30 Firmware | through 1.16.0 |
| Weidmueller | Iot-Gw30-4g-Eu Firmware | through 1.16.0 |
| Weidmueller | Uc20-Wl2000-Ac Firmware | through 1.16.0 |
| Weidmueller | Uc20-Wl2000-Iot Firmware | through 1.16.0 |