VULNERABILITY INTELLIGENCE

CVE-2022-36325

CVSS score6.8 MEDIUM
EPSS probability1.01%
CISA KEVNot currently listed
Published2022-08-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.

Weakness classification

  • productcert@siemens.com: CWE-80
  • nvd@nist.gov: NVD-CWE-Other

Primary references