Certec EDV GmbH atvise scada is prone to a cross-site scripting vulnerability and an HTTP header-injection vulnerability.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks and to insert a crafted HTTP header into an HTTP response that could cause web server cache poisoning. These issues may aid in further attacks.
Versions prior to atvise 3.1 are vulnerable.
Information
CVE-2017-6029
Exploit
An attacker can exploit these issues by enticing an unsuspecting user into visiting a specially crafted URL.
References:
- Certec EDV GmbH atvise scada Homepage (certec)
- ICSA-17-096-01: Certec EDV GmbH atvise scada (ICS CERT)