PatchTheCVECVE-2024-6558: HMS Industrial Networks Anybus-CompactCom 30 products are vulnerable to a XSS attack caused by the lack of in
CVE-2024-6558 is a medium-severity flaw (CVSS 6.3) affecting anybus compactcom 30 module ethernet\/ip firmware, anybus compactcom 30 module usb without housing firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
HMS Industrial Networks Anybus-CompactCom 30 products are vulnerable to a XSS attack caused by the lack of input sanitation checks. As a consequence, it is possible to insert HTML code into input fields and store the HTML code. The stored HTML code will be embedded in the page and executed by host browser the next time the page is loaded, enabling social engineering attacks.
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 6.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.3% (top 83%) |
| CISA exploited list | No |
| Weakness | CWE-79 |
| Published | 2024-07-25 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-6558?
anybus compactcom 30 module ethernet\/ip firmware: mitigate or apply the listed mitigation; anybus compactcom 30 module usb without housing firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2024-6558 being exploited?
CVE-2024-6558 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-6558 affect?
CVE-2024-6558 affects anybus compactcom 30 module ethernet\/ip firmware, anybus compactcom 30 module usb without housing firmware. Severity is medium (CVSS 6.3). HMS Industrial Networks Anybus-CompactCom 30 products are vulnerable to a XSS attack caused by the lack of input sanitation checks. As a consequence, it is possible to insert HTML code into input fields and store the HTML code. The stored
How urgent is CVE-2024-6558?
Priority 26/100. No elevated risk signals yet.