description: A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device.
problem types: CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
affected:
{
vendor: Siemens
product: SCALANCE X204RNA (HSR)
versions:
version: All versions < V3.2.7, status: affected
}
{
vendor: Siemens
product: SCALANCE X204RNA (PRP)
versions:
version: All versions < V3.2.7, status: affected
}
{
vendor: Siemens
product: SCALANCE X204RNA EEC (HSR)
versions:
version: All versions < V3.2.7, status: affected
}
{
vendor: Siemens
product: SCALANCE X204RNA EEC (PRP)
versions:
version: All versions < V3.2.7, status: affected
}
{
vendor: Siemens
product: SCALANCE X204RNA EEC (PRP/HSR)
versions:
version: All versions < V3.2.7, status: affected
}
