PT-2023-12318 · Furukawa Electric · Furukawa Electric Latam 423-41W/Ac+1

CVE-2021-37386

·

Publicado

2023-07-17

·

Atualizado

2024-10-29

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:H
Name of the Vulnerable Software and Affected Versions Furukawa Electric LatAm 423-41W/AC versions prior to 1.1.4 Furukawa Electric LatAm LD421-21W versions prior to 1.3.3
Description The issue is related to an HTML injection vulnerability via the serial number update function. This vulnerability allows for the injection of malicious HTML code, potentially leading to unauthorized access or control of the system.
Recommendations For Furukawa Electric LatAm 423-41W/AC versions prior to 1.1.4, update to version 1.1.4 or later to resolve the issue. For Furukawa Electric LatAm LD421-21W versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the serial number update function until a patch is available.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2021-37386

Produtos afetados

Furukawa Electric Latam 423-41W/Ac
Furukawa Electric Latam Ld421-21W