CVE:CVE-2015-6462
CNNVD:CNNVD-201509-443
Schneider Electric Modicon PLC BMXNOC0401等都是法国施耐德电气（Schneider Electric）公司的可编程控制器。
多款Schneider Electric Modicon PLC产品中存在跨站脚本漏洞，该漏洞源于程序没有充分过滤用户提交的输入。当用户浏览受影响的网站时，其浏览器将执行攻击者提供的任意脚本代码。这可能导致攻击者窃取基于cookie的身份验证并发起其它攻击。以下产品受到影响：Schneider Electric Modicon PLC BMXNOC0401，BMXNOE0100，BMXNOE0110，BMXNOE0110H，BMXNOR0200H，BMXP342020，BMXP342020H，BMXP342030，BMXP3420302，BMXP3420302H，BMXP342030H。
solution:Upgrade schneider-electric bmxnoc0401_firmware to a higher version than -; Upgrade schneider-electric bmxnoe0100_firmware to a higher version than -; Upgrade schneider-electric bmxnoe0110_firmware to a higher version than -; Upgrade schneider-electric bmxnoe0110h_firmware to a higher version than -; Upgrade schneider-electric bmxnor0200h_firmware to a higher version than -; Upgrade schneider-electric bmxp342020_firmware to a higher version than -; Upgrade schneider-electric bmxp342020h_firmware to a higher version than -; Upgrade schneider-electric bmxp342030_firmware to a higher version than -; Upgrade schneider-electric bmxp3420302_firmware to a higher version than -; Upgrade schneider-electric bmxp3420302h_firmware to a higher version than -; Upgrade schneider-electric bmxp342030h_firmware to a higher version than -