AUMA: Reflected Cross-Site Scripting Vulnerability in SIMA Master Stations
A reflected cross-site scripting vulnerability exists in the System Diagnostics Manager (SDM) component of SIMA² Master Stations.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-4286US | medium6.1 | — | ||
A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions >=3.00 and <=C4.93 that enables a remote attacker to e… | ||||
references
External citations — patches, advisories, analysis.
remediations (1)
- MitigationSIMA² Master Station
Do not use Hyperlinks provided by untrusted 3rd party to access the SIMA² System Diagnostics Manager. Hyperlinks may be provided via: - Emails from unknown users - Social media channels - Messaging services - Webpages with comment functionality - QR Codes The use of external Web Application Firewalls (WAF) can mitigate attacks using reflected cross-site scripting.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan