PT-2026-25782 · Shenzhen Hereta Technology Co.+1 · Hereta Eth-Imc408M+1
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Hereta ETH-IMC408M firmware versions prior to 1.0.15
Description
The software contains a stored cross-site scripting issue that allows authenticated attackers to inject arbitrary JavaScript. The attack vector involves manipulating the
Device Location field. Attackers can inject malicious scripts through the System Status interface. These scripts execute in the browsers of users viewing the status page because of a lack of input sanitation.Recommendations
Update to a version newer than 1.0.15.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Hereta Eth-Imc408M
Eth-Imc408M Firmware