Description
The affected product is vulnerable to a cross-site scripting attack which may allow an attacker to bypass authentication and takeover admin accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elvaco | M-Bus Metering Gateway CMe3100 | 1.12.1 | — |
Advisories 1
- ICSA-24-291-01 Elvaco M-Bus Metering Gateway CMe3100 (Update A) CISA ICS & IT advisories · Nov 14, 2024
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-01 government-resource