CVE-2015-6462

Description

Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser.

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3