CVE-2024-6558
HMS Industrial Networks Anybus-CompactCom 30 Cross-site Scripting
- State
- Published
- Severity
- 6.3 Medium
- Published
- Jul 25, 2024
- Updated
- Aug 27, 2025
- Reserved
- Jul 8, 2024
Description
HMS Industrial Networks
Anybus-CompactCom 30 products are vulnerable to a XSS attack caused by the lack of input sanitation checks. As a consequence, it is possible to insert HTML code into input fields and store the HTML code. The stored HTML code will be embedded in the page and executed by host browser the next time the page is loaded, enabling social engineering attacks.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:H/SI:H/SA:L | icscert |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L | icscert |
Weaknesses
- CWE-79 Cross-site Scripting
Affected Products
| Product | Versions |
|---|---|
Anybus-CompactCom 30HMS Industrial Networks |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.