Summary
Detail | |||
---|---|---|---|
Vendor | Omron | First view | 2014-07-24 |
Product | ns5 Hmi Terminal | Last view | 2014-07-24 |
Version | - | Type | Hardware |
Update | * | ||
Edition | * | ||
Language | * | ||
Sofware Edition | * | ||
Target Software | * | ||
Target Hardware | * | ||
Other | * | ||
CPE Product | cpe:2.3:h:omron:ns5_hmi_terminal |
Activity : Overall
Related : CVE
Date | Alert | Description | |
---|---|---|---|
3.5 | 2014-07-24 | CVE-2014-2370 | Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data. |
6 | 2014-07-24 | CVE-2014-2369 | Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. |
CWE : Common Weakness Enumeration
% | id | Name |
---|---|---|
50% (1) | CWE-352 | Cross-Site Request Forgery (CSRF) |
50% (1) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |