CVE-2024-34923

Summary

In Avocent DSR2030 Appliance firmware 03.04.00.07 before 03.07.01.23, and SVIP1020 Appliance firmware 01.06.00.03 before 01.07.00.00, there is reflected cross-site scripting (XSS).

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://ka1ne1.github.io/avocent_xss.html
• https://github.com/Ka1ne1/ka1ne1.github.io/blob/main/avocent_xss.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://ka1ne1.github.io/avocent_xss.html
• https://github.com/Ka1ne1/ka1ne1.github.io/blob/main/avocent_xss.html

• ←Previous
• Next→