PT-2024-36081
CVE-2024-5420
·
تاريخ النشر
2024-06-04
·
تاريخ التحديث
2025-10-08
الوصف من
CVSS 4.0
8.3
عاليةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions:
SEH Computertechnik utnserver Pro versions prior to 20.1.23
SEH Computertechnik utnserver ProMAX versions prior to 20.1.23
SEH Computertechnik INU-100 versions prior to 20.1.23
Description:
The issue is related to missing input validation in the web-interface of the affected devices, allowing stored Cross-Site Scripting (XSS). This can be exploited by attackers to inject malicious scripts into the web-interface.
Recommendations:
For SEH Computertechnik utnserver Pro versions prior to 20.1.23, update to version 20.1.23 to stay secure.
For SEH Computertechnik utnserver ProMAX versions prior to 20.1.23, update to version 20.1.23 to stay secure.
For SEH Computertechnik INU-100 versions prior to 20.1.23, update to version 20.1.23 to stay secure.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾