References https://nvd.nist.gov/vuln/detail/CVE-2015-6477 https://alhasawi.medium.com/ot-hunt-nordex-nc2-30f5819d9ed4 https://vulners.com/packetstorm/PACKETSTORM:135068 https://dariusfreamon.wordpress.com/2013/10/18/nordex-nc2-wind-farm-portal-reflected-xss/ https://vuldb.com/?id.78514 https://avd.aliyun.com/detail?id=AVD-2015-6477 https://cve.imfht.com/detail/CVE-2015-6477 https://www.icsisia.com/industry/content-766.html https://www.twcert.org.tw/newepaper/cp-67-2614-0d164-3.html https://www.nsfocus.net/vulndb/31132 https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-6477.yaml https://www.isssource.com/nordex-fixes-wind-farm-scada-app/
Related Vulnerabilities仁和兴业(深圳)软件有限公司仁和云ERPbackupexportall 接口存在任意文件读取漏洞Versa Concerto /portalapi/v1/roles/option 权限绕过漏洞(CVE-2025-34027)PoCCVE-2026-47717: FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data DisclosureTRUfusion Enterprise /trufusionPortal/getProjectList 权限绕过漏洞(CVE-2025-27223)WIFISKY 7层流控路由器 /portal/ibilling/index.php 命令执行漏洞大华智慧园区综合管理平台 /portal/itc/attachment_downloadByUrlAtt.action 文件读取漏洞HIKVISION 综合安防管理平台 /artemis-portal/artemis/env 信息泄露漏洞用友NC /portal/pt/M0dUlE/redeploy SQL 注入漏洞PoCCVE-2025-4576: Liferay Portal & DXP - Cross-Site ScriptingLiferay Portal/DXP存在XSS漏洞(CVE-2025-4576)PoCTRUfusion Enterprise /trufusionPortal/getCobrandingData 文件读取漏洞(CVE-2025-27222)PoC用友 NC /portal/pt/portalpage/importPml XML 外部实体注入漏洞PoC用友 NC /portal/pt/oacoSchedulerEvents/deleteEvent SQL 注入漏洞