Description
This vulnerability could allow an attacker to send malicious Javascript code resulting in hijacking of the user’s cookie/session tokens, redirecting the user to a malicious webpage, and performing unintended browser action.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | HMI Designer | All versions – ≤ 2.1.11.0 | — |
Advisories 1
- ICSA-21-173-01 Advantech WebAccess HMI Designer (Update A) CISA ICS & IT advisories · Nov 9, 2021