CVE-2018-18991

MEDIO 6.1CVE-2018-18991 · Published 04/12/2018 · updated 17/06/2026

En resumen

CVE-2018-18991 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a scada webserver (spidercontrol).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.85%, mayor que el 58.4% de las vulnerabilidades.
Solución: actualizar a 2.03.0001 o posterior.

Package	Affected versions	Patched versions
scada webserver spidercontrol	`< 2.03.0001`	`2.03.0001`

Description

Reflected cross-site scripting (non-persistent) in SCADA WebServer (Versions prior to 2.03.0001) could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser.

References

securityfocus.com/bid/106105 · Third Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-18-338-02 · Third Party Advisory

Más vulnerabilidades de scada webserver

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free