CVE-2016-5811 An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. User controlled input is not neutralized prior to being placed in web page output (CROSS-SITE SCRIPT...
MediumCVSS 6.1
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. User controlled input is not neutralized prior to being placed in web page output (CROSS-SITE SCRIPTING).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| visonic powerlink2 firmware | All versions | No fix listed |
References
- 94894 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource