CVE-2019-6853: XSS
First published: Wed Nov 20 2019(Updated: )
A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702) , which could enable a successful Cross-site Scripting (XSS attack) when using the products web server.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Andover Continuum 9680 Firmware | ||
| Schneider-electric Andover Continuum 9680 | ||
| Schneider-electric Andover Continuum 5740 Firmware | ||
| Schneider-electric Andover Continuum 5740 | ||
| Schneider-electric Andover Continuum 5720 Firmware | ||
| Schneider-electric Andover Continuum 5720 | ||
| Schneider-electric Andover Continuum Bcx4040 Firmware | ||
| Schneider-electric Andover Continuum Bcx4040 | ||
| Schneider-electric Andover Continuum Bcx9640 Firmware | ||
| Schneider-electric Andover Continuum Bcx9640 | ||
| Schneider-electric Andover Continuum 9900 Firmware | ||
| Schneider-electric Andover Continuum 9900 | ||
| Schneider-electric Andover Continuum 9940 Firmware | ||
| Schneider-electric Andover Continuum 9940 | ||
| Schneider-electric Andover Continuum 9941 Firmware | ||
| Schneider-electric Andover Continuum 9941 | ||
| Schneider-electric Andover Continuum 9924 Firmware | ||
| Schneider-electric Andover Continuum 9924 | ||
| Schneider-electric Andover Continuum 9702 Firmware | ||
| Schneider-electric Andover Continuum 9702 | ||
| Schneider-electric Andover Continuum 9200 Firmware | ||
| Schneider-electric Andover Continuum 9200 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-6853.
What is the title of the vulnerability?
The title of the vulnerability is 'A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum'.
What is the severity level of CVE-2019-6853?
The severity level of CVE-2019-6853 is medium (6.1).
Which software/products are affected by CVE-2019-6853?
The Andover Continuum models 9680, 5740, 5720, bCX4040, bCX9640, 9900, 9940, 9924, and 9702 are affected by CVE-2019-6853.
How can CVE-2019-6853 be exploited?
CVE-2019-6853 can be exploited through a successful Cross-site Scripting (XSS) attack when using the product's web server.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/tags
- agent/softwarecombine
- agent/description
- agent/event
- agent/first-publish-date
- vendor/schneider-electric
- canonical/schneider-electric andover continuum 9680 firmware
- canonical/schneider-electric andover continuum 9680
- canonical/schneider-electric andover continuum 5740 firmware
- canonical/schneider-electric andover continuum 5740
- canonical/schneider-electric andover continuum 5720 firmware
- canonical/schneider-electric andover continuum 5720
- canonical/schneider-electric andover continuum bcx4040 firmware
- canonical/schneider-electric andover continuum bcx4040
- canonical/schneider-electric andover continuum bcx9640 firmware
- canonical/schneider-electric andover continuum bcx9640
- canonical/schneider-electric andover continuum 9900 firmware
- canonical/schneider-electric andover continuum 9900
- canonical/schneider-electric andover continuum 9940 firmware
- canonical/schneider-electric andover continuum 9940
- canonical/schneider-electric andover continuum 9941 firmware
- canonical/schneider-electric andover continuum 9941
- canonical/schneider-electric andover continuum 9924 firmware
- canonical/schneider-electric andover continuum 9924
- canonical/schneider-electric andover continuum 9702 firmware
- canonical/schneider-electric andover continuum 9702
- canonical/schneider-electric andover continuum 9200 firmware
- canonical/schneider-electric andover continuum 9200