Back to Database
Status published
High
CVE-2014-5408
Nordex NC2 Cross-site Scripting
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the login script in the Wind Farm Portal on Nordex Control 2 (NC2) SCADA devices 15 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-5408
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Darius Freamon
Affected Vendor
Nordex
View all reports →Affected Software
Nordex Control 2 (NC2) SCADA
Vulnerable Versions:
0
Timeline
Official Publish:
November 5th, 2014
Last Modified:
November 3rd, 2025
Added to House:
July 19th, 2026