5.3
Medium
CVE-2025-7746 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that…
Description
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives | Versions not published | |
| ATV930/950/955/960/980/9A0/9B0/9L0/991/992/993 Altivar Process Drives | Versions not published | |
| ILC992 InterLink Converter | Versions not published | |
| ATV340E Altivar Machine Drives | Versions not published | |
| ATV6000 Medium Voltage Altivar Process Drives | Versions not published | |
| ATS490 Altivar Soft Starter | Versions not published | |
| VW3A3720 & VW3A3721 Altivar Process Communication Modules | Versions not published | |
| VW3A3530D: ATVdPAC module 25.0 | earliest → < 25.0 | 25.0 |