CVE-2014-6616: XSS

Published Aug 31, 2015

Updated

Cross-site scripting (XSS) vulnerability in Softing FG-100 PROFIBUS Single Channel (FG-100-PB) with firmware FG-x00-PBV2.02.0.00 allows remote attackers to inject arbitrary web script or HTML via the DEVICENAME parameter to cgi-bin/CFGhttp/.

Affected Software

2 affected components

Softing Fg-x00 Profibus Firmware=2.02.0.00

Softing FG-100 PROFIBUS

Event History

Aug 31, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6616?

CVE-2014-6616 is classified as a medium severity vulnerability due to the potential for Cross-Site Scripting attacks.

How do I fix CVE-2014-6616?

To mitigate CVE-2014-6616, update the Softing FG-100 PROFIBUS firmware to a version that addresses this vulnerability.

What kind of attack can be executed using CVE-2014-6616?

CVE-2014-6616 allows remote attackers to perform Cross-Site Scripting attacks by injecting malicious scripts or HTML.

Which software is affected by CVE-2014-6616?

CVE-2014-6616 specifically affects the Softing FG-100 PROFIBUS devices running firmware version 2.02.0.00.

Is CVE-2014-6616 exploitable remotely?

Yes, CVE-2014-6616 is exploitable remotely as it allows attackers to inject malicious content via the web interface.