CVE-2024-26367

2024-05-1416:16:22

[email protected]

web.nvd.nist.gov

cross site scripting

evertz microsystems

firmware 8.6.5

remote attacker

arbitrary code

crafted payload

security vulnerability

7.2 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

Cross Site Scripting vulnerability in Evertz microsystems MViP-II Firmware 8.6.5, XPS-EDGE-* Build 1467, evEDGE-EO-* Build 0029, MMA10G-* Build 0498, 570IPG-X19-10G Build 0691 allows a remote attacker to execute arbitrary code via a crafted payload to the login parameters.

References

cc.com

evertz.com

wiki.notveg.ninja/blog/CVE-2024-26367/