CVE-2015-6462: XSS
First published: Thu Mar 21 2019(Updated: )
Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser.
Credit: ics-cert@hq.dhs.gov ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Bmxnoc0401 Firmware | ||
| Schneider-electric Bmxnoc0401 | ||
| Schneider-electric Bmxnoe0100 Firmware | ||
| Schneider-electric Bmxnoe0100 | ||
| Schneider-electric Bmxnoe0110 Firmware | ||
| Schneider-electric Bmxnoe0110 | ||
| Schneider-electric Bmxnoe0110h Firmware | ||
| Schneider-electric Bmxnoe0110h | ||
| Schneider-electric Bmxnor0200h Firmware | ||
| Schneider-electric Bmxnor0200h | ||
| Schneider-electric Bmxp342020 Firmware | ||
| Schneider-electric Bmxp342020 | ||
| Schneider-electric Bmxp342020h Firmware | ||
| Schneider-electric Bmxp342020h | ||
| Schneider-electric Bmxp342030 Firmware | ||
| Schneider-electric Bmxp342030 | ||
| Schneider-electric Bmxp3420302 Firmware | ||
| Schneider-electric Bmxp3420302 | ||
| Schneider-electric Bmxp3420302h Firmware | ||
| Schneider-electric Bmxp3420302h | ||
| Schneider-electric Bmxp342030h Firmware | ||
| Schneider-electric Bmxp342030h | ||
| All of | ||
| Schneider-electric Bmxnoc0401 Firmware | ||
| Schneider-electric Bmxnoc0401 | ||
| All of | ||
| Schneider-electric Bmxnoe0100 Firmware | ||
| Schneider-electric Bmxnoe0100 | ||
| All of | ||
| Schneider-electric Bmxnoe0110 Firmware | ||
| Schneider-electric Bmxnoe0110 | ||
| All of | ||
| Schneider-electric Bmxnoe0110h Firmware | ||
| Schneider-electric Bmxnoe0110h | ||
| All of | ||
| Schneider-electric Bmxnor0200h Firmware | ||
| Schneider-electric Bmxnor0200h | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp342020 Firmware | ||
| Schneider-electric Modicon M340 Bmxp342020 | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp342020h Firmware | ||
| Schneider-electric Modicon M340 Bmxp342020h | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp342030 Firmware | ||
| Schneider-electric Modicon M340 Bmxp342030 | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp3420302 Firmware | ||
| Schneider-electric Modicon M340 Bmxp3420302 | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp3420302h Firmware | ||
| Schneider-electric Modicon M340 Bmxp3420302h | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp342030h Firmware | ||
| Schneider-electric Modicon M340 Bmxp342030h |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-6462?
The severity of CVE-2015-6462 is medium with a severity value of 5.4.
How does Reflected Cross-Site Scripting (nonpersistent) work?
Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL containing JavaScript that will be executed on vulnerable Schneider Electric Modicon devices.
Which Schneider Electric Modicon devices are affected by CVE-2015-6462?
The Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H devices are affected by CVE-2015-6462.
How can I fix CVE-2015-6462?
To fix CVE-2015-6462, it is recommended to apply the latest firmware updates provided by Schneider Electric.
Where can I find more information about CVE-2015-6462?
More information about CVE-2015-6462 can be found at the following reference: https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/severity
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/schneider-electric
- canonical/schneider-electric bmxnoc0401 firmware
- canonical/schneider-electric bmxnoc0401
- canonical/schneider-electric bmxnoe0100 firmware
- canonical/schneider-electric bmxnoe0100
- canonical/schneider-electric bmxnoe0110 firmware
- canonical/schneider-electric bmxnoe0110
- canonical/schneider-electric bmxnoe0110h firmware
- canonical/schneider-electric bmxnoe0110h
- canonical/schneider-electric bmxnor0200h firmware
- canonical/schneider-electric bmxnor0200h
- canonical/schneider-electric bmxp342020 firmware
- canonical/schneider-electric bmxp342020
- canonical/schneider-electric bmxp342020h firmware
- canonical/schneider-electric bmxp342020h
- canonical/schneider-electric bmxp342030 firmware
- canonical/schneider-electric bmxp342030
- canonical/schneider-electric bmxp3420302 firmware
- canonical/schneider-electric bmxp3420302
- canonical/schneider-electric bmxp3420302h firmware
- canonical/schneider-electric bmxp3420302h
- canonical/schneider-electric bmxp342030h firmware
- canonical/schneider-electric bmxp342030h
- canonical/schneider-electric modicon m340 bmxp342020 firmware
- canonical/schneider-electric modicon m340 bmxp342020
- canonical/schneider-electric modicon m340 bmxp342020h firmware
- canonical/schneider-electric modicon m340 bmxp342020h
- canonical/schneider-electric modicon m340 bmxp342030 firmware
- canonical/schneider-electric modicon m340 bmxp342030
- canonical/schneider-electric modicon m340 bmxp3420302 firmware
- canonical/schneider-electric modicon m340 bmxp3420302
- canonical/schneider-electric modicon m340 bmxp3420302h firmware
- canonical/schneider-electric modicon m340 bmxp3420302h
- canonical/schneider-electric modicon m340 bmxp342030h firmware
- canonical/schneider-electric modicon m340 bmxp342030h