CVE-2014-2370

N/A Unknown

Published: July 24, 2014 Modified: October 06, 2025

Description

Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://automation.omron.com/en/us/products/

Source: ics-cert@hq.dhs.gov

https://www.cisa.gov/news-events/ics-advisories/icsa-14-203-01

Source: ics-cert@hq.dhs.gov

http://ics-cert.us-cert.gov/advisories/ICSA-14-203-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory US Government Resource

http://www.securityfocus.com/bid/68836

Source: af854a3a-2127-422b-91ae-364da2661108

4 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

0.6%

68th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-79 CWE-79

Affected Vendors

omron

Related CVEs