Read the docs
TI-2020-06097 Aliases CVE-2020-7574GHSA-v74w-hq7x-f7g9

Cross-site scripting in Siemens Climatix POL908

Priority LOW 28CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

A vulnerability has been identified in Climatix POL908 (BACnet/IP module) (All versions), Climatix POL909 (AWM module) (All versions < V11.32). A persistent cross-site scripting (XSS) vulnerability exists in the "Server Config" web interface of the affected devices that could allow an attacker to inject arbitrary JavaScript code. The code could be potentially executed later by another (possibly privileged) user. The security vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires no system privileges. An attacker could use the vulnerability to compromise the confidentiality and integrity of other users' web session.

Why it matters now

EPSS 0.00662 51st percentileScored 2026-11-07
Fix Fixed Climatix POL909 (AWM module) (Siemens): V11.32

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensClimatix POL908 (BACnet/IP module)All versions—No fix listedCNA
SiemensClimatix POL909 (AWM module)before V11.32V11.32Patch availableCNA
  • Climatix POL908 (BACnet/IP module) VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • Climatix POL909 (AWM module) VendorSiemens Affected before V11.32 Fixed in V11.32 Patch available CNA

CPE configurations NVD · 4

CPEVersionsRoleVendor
cpe:2.3:o:siemens:climatix_pol908_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:h:siemens:climatix_pol908:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:climatix_pol909_firmware:*:*:*:*:*:*:*:*before 11.32VulnerableSiemens
cpe:2.3:h:siemens:climatix_pol909:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:climatix_pol908_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:h:siemens:climatix_pol908:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:climatix_pol909_firmware:*:*:*:*:*:*:*:* Versions before 11.32 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:climatix_pol909:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

  • Fix · CNA Climatix POL909 (AWM module) (Siemens) Fixed in V11.32

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-7574
  2. 2026-10-03 Alias added: GHSA-v74w-hq7x-f7g9
  3. 2026-10-06 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2020-06098 Cross-site scripting in Siemens Climatix POL908 CVSS 3.1MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences