Description
Sensitive Cookie Without 'HttpOnly' Flag vulnerability in ABB REX640 PCL1 (firmware modules), ABB REX640 PCL2 (Firmware modules), ABB REX640 PCL3 (firmware modules) allows Cross-Site Scripting (XSS).This issue affects REX640 PCL1: from 1.0;0 before 1.0.8; REX640 PCL2: from 1.0;0 before 1.1.4; REX640 PCL3: from 1.0;0 before 1.2.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ABB | REX640 PCL1 | 1.0;0 – < 1.0.8 | 1.0.8 |
| ABB | REX640 PCL2 | 1.0;0 – < 1.1.4 | 1.1.4 |
| ABB | REX640 PCL3 | 1.0;0 – < 1.2.1 | 1.2.1 |
Advisories 1
- WID-SEC-2023-1435 Hitachi Energy Relion: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 12, 2023