Description
Leviton AcquiSuite and Energy Monitoring Hub are susceptible to a cross-site scripting vulnerability, allowing an attacker to craft a malicious payload in URL parameters, which would execute in a client browser when accessed by a user, steal session tokens, and control the service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Leviton AcquiSuite
Default version status: unaffected
Version A8810affected
Leviton Energy Monitoring Hub
Default version status: unaffected
Version A8812affected