8.2
High
CVE-2024-2050 CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when…
Description
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an attacker injects then executes arbitrary malicious JavaScript code within the context of the product.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H | Versions not published | |
| Easergy T200 (IEC104) Models: T200I, T200E, T200P, T200S, T200H | Versions not published | |
| Easergy T200 (DNP3) Models: T200I, T200E, T200P, T200S, T200H | Versions not published |