Schneider-electric

Network Management Card 2 Firmware

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2021-22811

  • EPSS 0.82%
  • Published 28.01.2022 20:15:10
  • Last modified 21.11.2024 05:50:43

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause script execution when the request of a privileged account accessing the vulnerable web page is intercepted. Affected ...

6.1

CVE-2021-22812

  • EPSS 0.82%
  • Published 28.01.2022 20:15:10
  • Last modified 21.11.2024 05:50:43

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC. Aff...

6.1

CVE-2021-22813

  • EPSS 0.82%
  • Published 28.01.2022 20:15:10
  • Last modified 21.11.2024 05:50:43

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC poin...

6.1

CVE-2021-22814

  • EPSS 0.82%
  • Published 28.01.2022 20:15:10
  • Last modified 21.11.2024 05:50:43

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists which could cause arbritrary script execution when a malicious file is read and displayed. Affected Products: 1-Phase Uninterruptible ...

5.3

CVE-2021-22815

  • EPSS 0.25%
  • Published 28.01.2022 20:15:10
  • Last modified 21.11.2024 05:50:43

A CWE-200: Information Exposure vulnerability exists which could cause the troubleshooting archive to be accessed. Affected Products: 1-Phase Uninterruptible Power Supply (UPS) using NMC2 including Smart-UPS, Symmetra, and Galaxy 3500 with Network Ma...

6.1

CVE-2021-22810

  • EPSS 0.82%
  • Published 28.01.2022 20:15:09
  • Last modified 21.11.2024 05:50:42

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC poin...