Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-9477

Опубликовано: 13 нояб. 2024
Источник: nvd
CVSS3: 6.1
EPSS Низкий

Описание

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS).This issue affects Air4443 Firmware: through 14102024.

NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:airties:air4443_firmware:*:*:*:*:*:*:*:*
Версия до 14102024 (включая)
cpe:2.3:h:airties:air4443:-:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.00096
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
github
около 1 года назад

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS).This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support.

EPSS

Процентиль: 27%
0.00096
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79