Wiesemann & Theis Products Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in multiple products by Wiesemann & Theis. This issue allows low-privileged remote attackers to execute arbitrary web scripts or HTML. The vulnerability arises from crafted payloads injected into various fields on the configuration webpage, with the impact being limited.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject and execute malicious scripts in the context of the user's browser.

Remediation

All affected products are at end-of-life. For the Web-IO Digital Logger 6xIn, Web-Count 6x Digital, and Web-IO Digital 12xIn/12xOut products, it is recommended to upgrade to the latest firmware versions. No updates will be available for the other affected products.