CVE:CVE-2019-6528
CNNVD:CNNVD-201902-1008
多款PSI GridConnect GmbH产品中存在跨站脚本漏洞。远程攻击者可利用该漏洞执行任意脚本。以下产品和版本受到影响：Telecontrol Gateway 3G 4.2.21之前版本，5.0.27之前版本，5.1.19之前版本，6.0.16之前版本；Telecontrol Gateway XS-MU 4.2.21之前版本，5.0.27之前版本，5.1.19之前版本，6.0.16之前版本；Telecontrol Gateway VM 4.2.21之前版本，5.0.27之前版本，5.1.19之前版本，6.0.16之前版本；Smart Telecontrol Unit TCG 5.0.27之前版本，5.1.19之前版本，6.0.16之前版本；IEC104 Security Proxy 2.2.10之前版本。.
solution:Upgrade psigridconnect telecontrol_gateway_xs-mu_firmware to a higher version than 5.1.20,6.0.16,and avoid the version (,5.1.20),[5.1.21,6.0.16]; Upgrade psigridconnect telecontrol_gateway_vm_firmware to a higher version than 5.1.20,6.0.16,and avoid the version (,5.1.20),[5.1.21,6.0.16]; Upgrade psigridconnect telecontrol_gateway_3g_firmware to a higher version than 5.1.20,6.0.16,and avoid the version (,5.1.20),[5.1.21,6.0.16); Upgrade psigridconnect smart_telecontrol_unit_tcg_firmware to a higher version than 5.1.20,6.0.16,and avoid the version (,5.1.20),[5.1.21,6.0.16); Upgrade psigridconnect iec104_security_proxy_firmware to a higher version than 2.2.10,and avoid the version (,2.2.10]