March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – Emotet Malware – IOCs
August 24, 2020
Rewterz Threat Alert -Multiple Vulnerabilities In Discount Rules for WooCommerce Plugin
August 24, 2020
Rewterz Threat Alert – Emotet Malware – IOCs
August 24, 2020
Rewterz Threat Alert -Multiple Vulnerabilities In Discount Rules for WooCommerce Plugin
August 24, 2020
Severity
Medium
Analysis Summary
The login screen does not sufficiently sanitize input, which enables an attacker to generate specially crafted log messages. If an unsuspecting user views the log messages via a web browser, these log messages might be interpreted and executed as code by the web application. This cross-site scripting (XSS) vulnerability might compromise the confidentiality, integrity, and availability of the web application.
Impact
Cross-site scripting
Affected Vendors
Siemens
Affected Products
SICAM WEB firmware: all versions prior to C05.30
Remediation
Siemens recommends users update to the latest version, v05.30