CVE-2020-7481

A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), which could enable a successful Cross-site Scripting (XSS attack) when using the products' web server.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cybersecurity@se.com

Published

2020-03-23

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Andover Continuum 5720 Firmware (Schneider-electric)
• Andover Continuum 5740 Firmware (Schneider-electric)
• Andover Continuum 9200 Firmware (Schneider-electric)
• Andover Continuum 9680 Firmware (Schneider-electric)
• Andover Continuum 9702 Firmware (Schneider-electric)
• Andover Continuum 9900 Firmware (Schneider-electric)
• Andover Continuum 9924 Firmware (Schneider-electric)
• Andover Continuum 9940 Firmware (Schneider-electric)
• Andover Continuum 9941 Firmware (Schneider-electric)
• Andover Continuum Bcx4040 Firmware (Schneider-electric)
• Andover Continuum Bcx9640 Firmware (Schneider-electric)

References

• https://www.se.com/ww/en/download/document/SEVD-2020-070-04/