PT-2023-12318 · Furukawa Electric · Furukawa Electric Latam 423-41W/Ac+1
CVE-2021-37386
·
Publicado
2023-07-17
·
Atualizado
2024-10-29
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
Furukawa Electric LatAm 423-41W/AC versions prior to 1.1.4
Furukawa Electric LatAm LD421-21W versions prior to 1.3.3
Description
The issue is related to an HTML injection vulnerability via the serial number update function. This vulnerability allows for the injection of malicious HTML code, potentially leading to unauthorized access or control of the system.
Recommendations
For Furukawa Electric LatAm 423-41W/AC versions prior to 1.1.4, update to version 1.1.4 or later to resolve the issue.
For Furukawa Electric LatAm LD421-21W versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue.
As a temporary workaround, consider restricting access to the serial number update function until a patch is available.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Furukawa Electric Latam 423-41W/Ac
Furukawa Electric Latam Ld421-21W