CVE-2022-45938

Name of the Vulnerable Software and Affected Versions Comcast Defined Technologies microeisbss versions through 2021

Description An issue allows an attacker to inject a stored XSS payload in the Device ID field under Inventory Management, achieving Remote Code Execution and privilege escalation.

Recommendations For versions through 2021, update to a version that includes a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the Inventory Management feature, specifically the Device ID field, until a patch is available.