← All advisories

Medium severity5.4NVD Advisory· Published Jun 3, 2019· Updated Jun 17, 2026

CVE-2019-11370

CVE-2019-11370

Description

Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html "System contact" field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Carel/Pcoweb Card Firmware
cpe:2.3:o:carel:pcoweb_card_firmware:*:*:*:*:*:*:*:*
Range: <b1.2.4
Carel/pCOWebdescription
Carel/pCOWebllm-fuzzy
Range: <B1.2.4

Patches

Vulnerability mechanics

References

2

drive.google.com/opennvdExploitThird Party Advisory
github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11370nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.