Description
An unauthenticated remote attacker could provide a malicious link and trick an unsuspecting user into clicking on it. If clicked, the attacker could execute the malicious JavaScript (JS) payload in the target’s security context.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAUTER | EY-AS525F001 with moduWeb | all versions | — |
Advisories 1
- ICSA-23-082-03 SAUTER EY-modulo 5 Building Automation Stations CISA ICS & IT advisories · Apr 3, 2023