CVE-2017-6053 in VTScada

Résumé

par MITRE

A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vulnerability may allow JavaScript code supplied by the attacker to execute within the user's browser.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 16/02/2017
• Divulgation: 21/06/2017
• Modérer: accepté
• Entrée: VDB-102734
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 6.1 (NVD)
• EPSS: 0.00825
• KEV: non
• Activités: très faible
• Secteur: Energy, Telecommunication, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-6053
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-6053
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-6053/