Cross-site scripting (XSS) vulnerability in the web server in the ECOM Ethernet module in Koyo H0-ECOM H0-ECOM100 H2-ECOM H2-ECOM-F H2-ECOM100 H4-ECOM H4-ECOM-F and H4-ECOM100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.