Cross-site scripting vulnerability in multiple Siemens products

Siemens SIMATIC WinCC is an automated data acquisition and monitoring (SCADA) system, Siemens SIMATIC HMI Comfort Panels is a touch panel device, Siemens SIMATIC HMI Comfort Outdoor Panels is a touch panel device for outdoor use, and Siemens SIMATIC HMI Comfort Outdoor Panels is a touch panel device for outdoor use. SIMATIC HMI Comfort Outdoor Panels are touch panel devices designed for outdoor use. A cross-site scripting vulnerability exists in several Siemens products. The vulnerability stems from the lack of proper validation of client data by the WEB application. An attacker could exploit the vulnerability to execute client-side code.