CVE-2017-6675

https://notcve.org/view.php?id=CVE-2017-6675

A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against an affected system. More Information: CSCvd25405. Known Affected Releases: 1.1(0.176). Una vulnerabilidad en la interfaz web de Cisco Industrial Network Director podría permitir que un atacante remoto no autenticado lleve a cabo un ataque cross-site scripting (XSS) contra un sistema afectado. Más información: CSCvd25405. • http://www.securityfocus.com/bid/98962 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ind • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •