VYPR

NMC2 AOS

by Schneider Electric

CVEs (2)

  • CVE-2021-22814Jan 28, 2022
    risk 0.00cvss epss 0.01

    A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists which could cause arbritrary script execution when a malicious file is read and displayed. Affected Products: 1-Phase Uninterruptible Power Supply (UPS) using NMC2…

  • CVE-2021-22812Jan 28, 2022
    risk 0.00cvss epss 0.01

    A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC. Affected Products: 1-Phase…