What is CVE-2016-4513?

CVE-2016-4513 is a medium-severity vulnerability in Schneider-Electric Powerlogic Pm8ecc, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2016-06-26.

How severe is CVE-2016-4513?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Schneider-Electric Powerlogic Pm8ecc

CVE-2016-4513

Cross-site scripting (XSS) vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.009 (56.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Schneider-electric Powerlogic_pm8ecc
Schneider-electric Powerlogic_pm8ecc_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2016-4513?: CVE-2016-4513 is a medium-severity vulnerability in Schneider-Electric Powerlogic Pm8ecc, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2016-06-26.
How severe is CVE-2016-4513?: Medium severity. CVSS v3 base score is 6.1 out of 10.