CVE-2014-6616: Cross-site scripting (XSS) vulnerability in Softing FG-100 PROFIBUS Single Channel (FG-100-PB) with firmwar...

Security readout for executives and security teams

CVE-2014-6616 is a cross-site scripting issue in the Softing FG-100-PB industrial gateway web interface. A remote attacker could inject script or HTML through the device name field. Business urgency depends on whether these gateways are still deployed and whether their web UI is reachable beyond trusted administrators. Exposure is limited to organizations running the named Softing FG-100-PB firmware or closely matching deployments. Risk increases if the management web interface is reachable from corporate networks, remote access paths, or the internet. Prioritize this if Softing FG-100-PB devices support operational technology or are reachable outside a tightly controlled admin network. If no affected devices exist, track as closed by inventory evidence. Mitigation focus: Identify any Softing FG-100-PB gateways and their firmware versions.; Restrict web UI access to trusted administrative networks only.; Remove any internet exposure for the device management interface..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.