XSS in Omron Ns10
CVE-2014-2370
Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.014 (68.9th percentile) — read the EPSS interpretation.
Affected products
- Omron Ns10 — versions 8.1xx
- Omron Ns10_hmi_terminal
- Omron Ns12 — versions 8.1xx
- Omron Ns12_hmi_terminal
- Omron Ns15 — versions 8.1xx
- Omron Ns15_hmi_terminal
- Omron Ns5 — versions 8.1xx
- Omron Ns5_hmi_terminal
- Omron Ns8 — versions 8.1xx
- Omron Ns8_hmi_terminal
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory, US Government Resource)
- af854a3a-2127-422b-91ae-364da2661108