Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.
References
Link Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf Mitigation Vendor Advisory
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: siemens

Published: 2022-08-10T11:18:45

Updated: 2023-10-10T10:21:04.880Z

Reserved: 2022-07-20T00:00:00


Link: CVE-2022-36325

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2022-08-10T12:15:12.997

Modified: 2023-06-27T19:51:47.307


Link: CVE-2022-36325

JSON object: View

cve-icon Redhat Information

No data.