Detections
Analytics
LOYTEC L-IP BACnet/IP Routers Cross-site Scripting (CVE-2026-12496)
info Tenable OT Security Plugin ID 505943
Description
An unauthenticated remote attacker can inject and store malicious JavaScript in the OPC XML-DA server statistics page (/webui/statistics/opc_srv) of a LOYTEC L-IP BACnet/IP router by sending a crafted 'User-Agent' header in a POST request to the device's '/da' endpoint. The script executes in an administrator's browser when the statistics page is later viewed, enabling session hijacking, credential theft, or device reconfiguration.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Plugin Details
Severity: Info
ID: 505943
Published: 9/7/2026
Updated: 9/7/2026
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Low
Score: 2.3
Percentile: 9.65
Reference Information
CVE: CVE-2026-12496