CVE-2017-5157

Summary

An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code.

Affected Software

Weaknesses

• Schneider Electric homeLYnk Controller XSS

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/95665
• https://ics-cert.us-cert.gov/advisories/ICSA-17-019-01

References

• http://www.securityfocus.com/bid/95665
• https://ics-cert.us-cert.gov/advisories/ICSA-17-019-01

• ←Previous
• Next→