Description
The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MCU Technologies | MCUsystem | 5.5 | — |