PT-2019-17641
CVE-2019-5401
·
Publicado
2019-08-01
·
Atualizado
2019-08-08
Descrição por
CVSS 3.1
4.8
MédiaMétricasAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
HP2910al-48G version W.15.14.0016
Description
A potential security issue has been identified, which exploits an XSS injection by setting the attack vector in one of the switch's persistent configuration fields, such as management URL, location, or contact. However, admin privileges are required to configure these fields, reducing the likelihood of exploitation.
Recommendations
For HP2910al-48G version W.15.14.0016, update to W.15.14.0017 to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾