Andover Continuum Controllers XSS Vulnerability Security Notification

This document details a cross-site scripting (XSS) vulnerability (CVE-2019-6853) in Schneider Electric's Andover Continuum building management system controllers. It provides remediation steps, including disabling the web server or applying compensating controls, as no firmware fix will be issued due to the product line being legacy.