CVE-2018-13809

A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions)

published April 17, 2019

CVSS
—
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The integrated web server of the affected CP devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into following a malicious link. User interaction is required for a successful exploitation. At the time of advisory publication no public exploitation of this vulnerability was known.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00794 · 55.9th percentile
Published
2019-04-17T13:38Z
EPSS history
Timeline
  • 17 APR 13:38Z
    A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions)
    cvelistv5