CSRF in Schneider-Electric Magelis Xbt Hmi
CVE-2013-2762
The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it easier for remote attackers to bypass intended access restrictions via crafted configuration data.
EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.
Affected products
- Schneider-electric Magelis_xbt_hmi
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (US Government Resource, x_refsource_MISC)