CVE-2020-10630

State: Published
Severity: Not scored
Published: May 5, 2020
Updated: Aug 4, 2024
Reserved: Mar 16, 2020

Description

SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users.

Scores

The record has no CVSS score.

Weaknesses

CWE-79 IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION ('CROSS-SITE SCRIPTING') CWE-79

Affected Products

Product	Versions
SAE IT-systems FW-50 Remote Telemetry Unit (RTU)n/a	FW-50 RTU, Series: 5 SeriesAffected CPU-type: CPU-5BAffected Hardware Revision: 2Affected CPLD Revision: 6Affected

References

https://www.us-cert.gov/ics/advisories/ICSA2012602

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.