CVE-2019-6853

A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702) , which could enable a successful Cross-site Scripting (XSS attack) when using the products web server.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cybersecurity@se.com

Published

2019-11-20

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Andover Continuum 5720 Firmware (Schneider-electric)
• Andover Continuum 5740 Firmware (Schneider-electric)
• Andover Continuum 9200 Firmware (Schneider-electric)
• Andover Continuum 9680 Firmware (Schneider-electric)
• Andover Continuum 9702 Firmware (Schneider-electric)
• Andover Continuum 9900 Firmware (Schneider-electric)
• Andover Continuum 9924 Firmware (Schneider-electric)
• Andover Continuum 9940 Firmware (Schneider-electric)
• Andover Continuum 9941 Firmware (Schneider-electric)
• Andover Continuum Bcx4040 Firmware (Schneider-electric)
• Andover Continuum Bcx9640 Firmware (Schneider-electric)
• 5740 And 5720 (Schneider Electric)
• 9900 (Schneider Electric)
• 9924 And 9702 (Schneider Electric)
• 9940 (Schneider Electric)
• Andover Continuum Models 9680 (Schneider Electric)
• Bcx4040 (Schneider Electric)
• Bcx9640 (Schneider Electric)

References

• https://www.se.com/ww/en/download/document/SEVD-2019-316-01/