EUVD-2026-77247
GHSA-56gg-mff9-qqr7
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent-only vector, no privileges to inject payload, but scope changes to victim browser with low confidentiality/integrity impact; user interaction mandatory.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
Lifecycle Timeline
3DescriptionCVE.org
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
AnalysisAI
Reflected or stored cross-site scripting in the web management interface of Contec's CAN-2-WF (Wireless LAN) and CAN-2-USB (USB Converter) industrial serial communication units allows an adjacent-network attacker to inject and execute arbitrary JavaScript in the browser of an authenticated user who interacts with the crafted content. The vulnerability affects the embedded web UI exposed by these serial-to-network converter devices, which are commonly deployed in industrial automation environments. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires three concurrent conditions: (1) the attacker must be positioned on the same adjacent network segment (LAN or Wi-Fi) as the CAN-2 device, ruling out remote internet-based exploitation; (2) the attacker must be able to inject malicious input into a field that the web interface subsequently renders unsanitized - this may require write access to a configuration or logging feature, the precise mechanism is not specified in the available data; (3) a legitimate user must be logged into the web management interface and actively interact with (view) the page containing the injected payload. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The overall risk is moderate and operationally bounded. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to apply the firmware update issued by Contec Co., Ltd. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
OS command injection in Contec's CAN-2-WF (Wireless LAN) and CAN-2-USB (USB) industrial communication converter units al
Arbitrary code execution is possible on Contec CAN 2.0B series communication converter units (CAN-2-WF wireless LAN and
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today