ГлавнаяУязвимости → CVE-2024-31199
8.8высокая

CVE-2024-31199

Описание

A “CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')” allows malicious users to permanently inject arbitrary Javascript code.

Затрагиваемое ПО
Proges Sensor net connect firmware v2Proges Sensor net connect v2
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H
Источники
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31199