VDB
CVE-2024-45385
CVE-2024-45385
PUBLISHED
CVSS 4.699999809265137 MEDIUM
A vulnerability has been identified in Industrial Edge Management OS (IEM-OS) (All versions). Affected components are vulnerable to reflected cross-site scripting (XSS) attacks. This could allow an attacker to extract sensitive information by tricking users into accessing a malicious link.
EPSS 0.61% · 70.3th percentile
Risk Scores
CVSS 3.1
4.699999809265137
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:U/RC:C
EPSS Score
0.61%
70.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Industrial Edge Management OS (IEM-OS) | 0 |
| siemens | industrial_edge_management |
Timeline
- Jan 14, 2025 CVE Published
- Jan 14, 2025 PoC Published
- Jan 14, 2025 PoC Published
- Jan 14, 2025 PoC Published
- Jan 14, 2025 PoC Published
- Jan 14, 2025 PoC Published
- Jan 14, 2025 PoC Published
- Jan 15, 2025 EPSS Score
- Jan 16, 2025 PoC Published
- Jan 31, 2025 EPSS Score
- Feb 15, 2025 EPSS Score
- Mar 3, 2025 EPSS Score