CVE-2012-1807: Cross-site scripting (XSS) vulnerability in the web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-...

Security readout for executives and security teams

This issue affects the built-in web server on several Koyo ECOM Ethernet modules. A remote attacker could inject script or HTML into the module’s web interface. Business urgency depends on whether these industrial control networking modules are deployed and reachable from user, vendor, or internet-facing networks. Exposure is likely limited to environments using the listed Koyo ECOM modules and enabling access to their embedded web server. Risk is higher where administrative interfaces are reachable from broader corporate, remote-access, vendor, or public networks. Treat this as an OT exposure-management item rather than a confirmed emergency. Prioritize quickly if affected modules are reachable outside tightly controlled administration networks or are used in safety, production, or critical process environments. Mitigation focus: Identify whether listed Koyo ECOM modules exist in OT or lab networks.; Review US-CERT ICSA-12-102-02 and vendor guidance for supported updates or mitigations.; Limit module web server access to trusted administration networks only..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.