EPSS
Percentile
79.2%
Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
File data ot_500128.nasl
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2908
ics-cert.us-cert.gov/advisories/ICSA-14-114-02
www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892012.pdf
www.exploit-db.com/exploits/44687/