CVE-2014-5382: Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Schrack Technik microControl wi...

Security readout for executives and security teams

CVE-2014-5382 is a cross-site scripting issue in the web interface of Schrack Technik microControl firmware 1.7.0 (937). An attacker could inject script or HTML into interface fields, potentially affecting users who view the compromised web UI. The source bundle does not provide CVSS scoring, confirmed exploitation, or a named fix. Exposure is most likely where Schrack Technik microControl emergency lighting management interfaces are reachable by users or networks that should not administer them. Internet-facing or broadly reachable management interfaces increase business risk. Asset evidence is needed because the CVE record lacks CPEs and structured affected-product metadata. Prioritize if these devices support safety-critical facilities, are reachable beyond a tightly controlled admin network, or remain on firmware 1.7.0 (937). Business urgency is lower if devices are isolated and vendor guidance has been applied, but the age of the issue makes legacy exposure plausible. Mitigation focus: Check Schrack Technik or integrator guidance for fixed firmware or compensating controls.; Restrict microControl web interface access to trusted administrative networks only.; Require authenticated administrative access through VPN or equivalent network controls..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.