carel Vulnerabilities and Affected Products
Vulnerabilities associated with pcoweb_card_firmware.
Products
Clear product- pcoweb_card_firmware1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-11370MEDIUM | carel pcoweb_card_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html "System contact" field. | CVSS5.4v3.0 | EPSS3.98% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |