CVEs-PoC/2014/CVE-2014-2908.md

CVE-2014-2908

Description

Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

POC

Reference

• https://www.exploit-db.com/exploits/44687/

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/kenzer-templates