CVE-2025-27448

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboards can inject JavaScript code into the dashboard name which will be executed when the website is loaded.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Endress+Hauser	Endress+Hauser MEAC300-FNADE4	<= <=0.16.0
Endress+Hauser	Endress+Hauser MEAC300-FNADE4	—

References

https://sick.com/psirtVendor Advisory
https://sick.com/psirtVendor Advisory
https://sick.com/psirtVendor Advisory
https://sick.com/psirtVendor Advisory
https://www.cisa.gov/resources-tools/resources/ics-recommended-practicesUS Government Resource
https://www.endress.comProduct
https://www.first.org/cvss/calculator/3.1Not Applicable
https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.jsonVendor Advisory
https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdfVendor Advisory

Timeline

Published: Jul 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-274499.8The MEAC300-FNADE4 does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, maki CVE-2025-27456.5A cross-site scripting vulnerability exists in AVEVA PI Web API version 2023 SP1 and prior that, if exploited, could allow an authenticated CVE-2025-274506.5The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4. An attacker can trick a user to establish an unencrypted CVE-2025-274515.3For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect passwo CVE-2025-274527.5The configuration of the Apache httpd webserver which serves the MEAC300-FNADE4 web application, is partly insecure. There are modules activ CVE-2025-274536.5The HttpOnly flag is set to false on the PHPSESSION cookie. Therefore, the cookie can be accessed by other sources such as JavaScript.CVE-2025-274544.3The application is vulnerable to cross-site request forgery. An attacker can trick a valid, logged in user into submitting a web request tha CVE-2025-274556.1The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user CVE-2025-274569.8The SMB server's login mechanism does not implement sufficient measures to prevent multiple failed authentication attempts within a short ti CVE-2025-274577.5All communication between the VNC server and client(s) is unencrypted. This allows an attacker to intercept the traffic and obtain sensitive CVE-2025-274587.5The VNC authentication mechanism bases on a challenge-response system where both server and client use the same password for encryption. The CVE-2025-274597.5The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords