Description
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)
vulnerability exists when an attacker injects then executes arbitrary malicious JavaScript code
within the context of the product.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H | SC2-04MOD-07000104 – ≤ prior | — |
| Schneider Electric | Easergy T200 (IEC104) Models: T200I, T200E, T200P, T200S, T200H | SC2-04IEC-07000104 – ≤ prior | — |
| Schneider Electric | Easergy T200 (DNP3) Models: T200I, T200E, T200P, T200S, T200H | SC2-04DNP-07000104 – ≤ prior | — |
Advisories 1
- SEVD-2024-072-01 Easergy T200 Multiple Vulnerabilities Schneider Electric CPCERT · Mar 12, 2024