Siemens SCALANCE X Switches (Update A)
A remote, authenticated attacker with access to the configuration web
server could be able to store script code on the web site, if the HRP redundancy 
option is set. This code could be executed in the web browser of victims visiting 
this web site (XSS), affecting its confidentiality, integrity and availability. 

User interaction is required for successful exploitation, as the user needs
to visit the manipulated web site. At the stage of publishing this security
advisory no public exploitation is known. The vendor has confirmed the
vulnerability and provides mitigations to resolve it.
 The integrated configuration web server of the affected devices could allow
Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into
accessing a malicious link.

User interaction is required for a successful  exploitation. The user must 
be logged into the web interface in order for the exploitation to succeed.
At the stage of publishing this security advisory no public exploitation is known.
The vendor has confirmed the vulnerability and provides mitigations to resolve it.
