CVE-2014-2370: XSS
First published: Thu Jul 24 2014(Updated: )
Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Omron Ns Series System Program Firmware | =8.1 | |
| Omron Ns Series System Program Firmware | =8.68 | |
| Omron Ns10 Hmi Terminal | ||
| Omron Ns12 Hmi Terminal | ||
| Omron Ns15 Hmi Terminal | ||
| Omron Ns5 Hmi Terminal | ||
| Omron Ns8 Hmi Terminal |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/omron
- canonical/omron ns series system program firmware
- version/omron ns series system program firmware/8.1
- version/omron ns series system program firmware/8.68
- canonical/omron ns10 hmi terminal
- canonical/omron ns12 hmi terminal
- canonical/omron ns15 hmi terminal
- canonical/omron ns5 hmi terminal
- canonical/omron ns8 hmi terminal