XSS in Nordex Control 2 (Nc2) Scada

CVE-2014-5408

Cross-site scripting (XSS) vulnerability in the login script in the Wind Farm Portal on Nordex Control 2 (NC2) SCADA devices 15 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.017 (74.4th percentile) — read the EPSS interpretation.