CVE-2014-5408CWE-79

Nordex NC2 Cross-site Scripting

High · published November 5, 2014

CVSS v2.0
7.5
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the login script in the Wind Farm Portal on Nordex Control 2 (NC2) SCADA devices 15 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.

The record
Technical detail
CVSS v2.0
7.5 · HIGH
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v4.0
Not supplied
EPSS
0.01671 · 76.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2014-11-05T11:00Z
EPSS history
Timeline
  • 05 NOV 11:00Z
    Nordex NC2 Cross-site Scripting
    cvelistv5