PT-2023-15611 · Softing · Smartlink Sw-Ht

·

CVE-2022-48192

·

Published

2023-11-06

·

Updated

2023-11-14

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Softing smartLink SW-HT versions prior to 1.30
Description The issue allows an attacker to execute a dynamic script, such as JavaScript or VBScript, in the context of the application. This is a Cross-site Scripting vulnerability.
Recommendations For versions prior to 1.30, update to version 1.30 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2022-48192

Affected Products

Smartlink Sw-Ht