Nordex NC2 XSS Vulnerability

An attacker with access to the Nordex Control 2 web interface could inject malicious script code that executes in the browser of engineering staff or operators, potentially allowing session hijacking, credential theft, or redirection to phishing sites.

Energy sector operators using Nordex Control 2 (NC2) SCADA systems should be concerned. This affects any facility that relies on NC2 for wind turbine control or grid-connected renewable energy operations where the web interface is accessible to staff.

An attacker with network access to the NC2 web interface (typically port 80/443) crafts a malicious URL or injects script into a vulnerable input field. When an authorized user (engineer or operator) visits the link or views the affected page, the script executes in their browser with their privileges, allowing the attacker to steal session cookies, capture credentials, or perform actions on their behalf.