Read the docs

Nordex

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Nordex records in CISA KEV

No Nordex vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nordex Control 2 Scada 2 records MEDIUM

Records

2 records

TI-2015-05440 CVE-2015-6477 · GHSA-x62w-289v-82mf

Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application…

Priority MEDIUM 41

Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application in Nordex Control 2 (NC2) SCADA 16 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.12042 Published 2015-10-18 No fix listed CWE-79
TI-2014-04408 CVE-2014-5408 · GHSA-28pc-8r63-2vcq

Nordex NC2 Cross-site Scripting

Priority LOW 36

Cross-site scripting (XSS) vulnerability in the login script in the Wind Farm Portal on Nordex Control 2 (NC2) SCADA devices 15 and earlier allows remote attackers to inject arbitrary web script or HTML via the username…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01671 Published 2014-11-05 No fix listed CWE-79
Open these records in search →