CVE-2019-11370
60Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 4.0%
from disclosure to weapon0 days
Published on NVDJun 3
1st PoCMay 22
VulnCheck+1694d
exploitation probability
4.0%top 10% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html "System contact" field.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/46897unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.