CVE-2016-5811

2017-02-1321:00:00

icscert

www.cve.org

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

35.9%

JSON

An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. User controlled input is not neutralized prior to being placed in web page output (CROSS-SITE SCRIPTING).

CNA Affected

[
  {
    "product": "Visonic PowerLink2",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Visonic PowerLink2"
      }
    ]
  }
]

References

www.securityfocus.com/bid/94894

ics-cert.us-cert.gov/advisories/ICSA-16-348-01