Endress+Hauser MEAC300-FNADE4 Cross-Site Scripting Vulnerability
Vulnerability
A cross-site scripting vulnerability has been identified in the Endress+Hauser MEAC300-FNADE4 web application, all firmware versions. This issue allows an attacker to inject JavaScript into the website via a crafted URL. The injected script is executed in the browser of an authenticated administrator who clicks the link.
Impact
Exploitation of this vulnerability allows for cross-site scripting, where injected scripts are executed in the context of the user's browser.
Remediation
Users are advised to update to the latest version of the MEAC300-FNADE4. Instructions for updating can be found on the SICK PSIRT website.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.