CVE-2019-6528 Cross-site scripting in PSI GridConnect GmbH (formerly known as PSI Nentec GmbH) Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy.
Cross-site scripting vulnerability in PSI GridConnect Telecontrol Gateway allows attackers to execute arbitrary code via malicious web input.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-6528?
CVE-2019-6528 is a high-severity cross-site scripting vulnerability in ICS-CERT PSI GridConnect GmbH (formerly known as PSI Nentec GmbH) Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy., published on 5 Mar 2019. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy versions Telecontrol Gateway 3G Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway XS-MU Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway VM Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Smart Telecontrol Unit TCG Versions 5.0.27, 5.1.19, 6.0.16 and prior, and IEC104 Security Proxy Version 2.2.10 and prior The web application browser interprets input as active HTML, JavaScript, or VBScript, which could allow an attacker to execute arbitrary code.
Weakness: CWE-79
Which versions are affected by CVE-2019-6528?
It affects 5 products.
Products include Psigridconnect Iec104 Security Proxy Firmware, Psigridconnect Smart Telecontrol Unit Tcg Firmware, Psigridconnect Telecontrol Gateway 3g Firmware, Psigridconnect Telecontrol Gateway Vm Firmware, Psigridconnect Telecontrol Gateway Xs-Mu Firmware.
How do I fix CVE-2019-6528?
No fix has been published for CVE-2019-6528 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2019-6528 being exploited?
There is no known exploitation of CVE-2019-6528 in the wild and no public exploit code.
Sources
Also known as GHSA-45cc-q6w5-96r8.