Summary
Successful exploitation of this vulnerability could allow an unauthenticated attacker to use HTTP proxy to inject arbitrary Javascript in a specially crafted HTTP request that may reflect it back in the HTTP response.
Vulnerabilities 1
-
Unscored —
Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. This vulnerability could allow an unauthorized attacker to inje…
Revision history
-
#1
ICSA-18-298-01 GEOVAP Reliance 4 SCADA/HMI
References
-
ICS Advisory ICSA-18-298-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-298-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-18-298-01