CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2020-7482
A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), which could cause a Reflective Cross-site Scripting (XSS attack) when using the products' web server.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- schneider-electric:andover_continuum_5720_firmware
- schneider-electric:andover_continuum_5740_firmware
- schneider-electric:andover_continuum_9200_firmware
- schneider-electric:andover_continuum_9680_firmware
- schneider-electric:andover_continuum_9702_firmware
- schneider-electric:andover_continuum_9900_firmware
- schneider-electric:andover_continuum_9924_firmware
- schneider-electric:andover_continuum_9940_firmware
- schneider-electric:andover_continuum_9941_firmware
- schneider-electric:andover_continuum_bcx4040_firmware
- schneider-electric:andover_continuum_bcx9640_firmware