5.3
Moyenne
CVE-2025-7746 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that…
Description
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives | Versions non publiées | |
| ATV930/950/955/960/980/9A0/9B0/9L0/991/992/993 Altivar Process Drives | Versions non publiées | |
| ILC992 InterLink Converter | Versions non publiées | |
| ATV340E Altivar Machine Drives | Versions non publiées | |
| ATV6000 Medium Voltage Altivar Process Drives | Versions non publiées | |
| ATS490 Altivar Soft Starter | Versions non publiées | |
| VW3A3720 & VW3A3721 Altivar Process Communication Modules | Versions non publiées | |
| VW3A3530D: ATVdPAC module 25.0 | premières → < 25.0 | 25.0 |