Описание
Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page.
Ссылки
- ExploitThird Party Advisory
- Product
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.06 (включая)
Одновременно
cpe:2.3:o:barix:instreamer_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:barix:instreamer:-:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00044
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
github
2 месяца назад
Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page.
EPSS
Процентиль: 13%
0.00044
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79