Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-7746

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause an unvalidated data injected by a malicious user

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives

Default version status: unaffected

  • all versionsaffected

Schneider Electric ATV930/950/955/960/980/9A0/9B0/9L0/991/992/993 Altivar Process Drives

Default version status: unaffected

  • all versionsaffected

Schneider Electric ILC992 InterLink Converter

Default version status: unaffected

  • all versionsaffected

Schneider Electric ATV340E Altivar Machine Drives

Default version status: unaffected

  • all versionsaffected

Schneider Electric ATV6000 Medium Voltage Altivar Process Drives

Default version status: unaffected

  • all versionsaffected

Schneider Electric ATS490 Altivar Soft Starter

Default version status: unaffected

  • all versionsaffected

Schneider Electric VW3A3720 & VW3A3721 Altivar Process Communication Modules

Default version status: unaffected

  • all versionsaffected

Schneider Electric VW3A3530D: ATVdPAC module

Default version status: unaffected

  • all versions to < v25.0affected

References