Lucene search

HpeCVE-2020-24627

HistoryOct 02, 2020 - 7:15 p.m.

CVE-2020-24627

2020-10-0219:15:13

CWE-79

hpe

web.nvd.nist.gov

cve-2020-24627

remote stored xss

hpe kvm ip console switches

security vulnerability

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches version(s): G2 4x1Ex32 Prior to 2.8.3.

Affected configurations

Nvd

Node

hpekvm_ip_console_switch_g2_firmwareRange<2.8.3

AND

hpekvm_ip_console_switch_g2Match4x1ex32

VendorProductVersionCPE
hpekvm_ip_console_switch_g2_firmware*cpe:2.3:o:hpe:kvm_ip_console_switch_g2_firmware:*:*:*:*:*:*:*:*
hpekvm_ip_console_switch_g24x1ex32cpe:2.3:h:hpe:kvm_ip_console_switch_g2:4x1ex32:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hpe	kvm_ip_console_switch_g2_firmware	*	cpe:2.3:o:hpe:kvm_ip_console_switch_g2_firmware::::::::
hpe	kvm_ip_console_switch_g2	4x1ex32	cpe:2.3:h:hpe:kvm_ip_console_switch_g2:4x1ex32:::::::*

CNA Affected

[
  {
    "product": "HPE KVM IP Console Switches",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "G2 4x1Ex32  Prior to 2.8.3"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04044en_us

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Related for CVE-2020-24627