certec_edv_gmbh - MidnightBSD Security Advisories

Advisories for certec_edv_gmbh

CVE-2017-6029 LOW

A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution.

CVSS 2.0

Severity: LOW

Problem Type: CWE-79,CWE-79,

Products Affected

Vendor	Product	Version
certec_edv_gmbh	atvise_scada	*

CVE-2017-6031 MEDIUM

A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-644,CWE-74,

Products Affected

Vendor	Product	Version
certec_edv_gmbh	atvise_scada	*