Lucene search
K

CVE-2024-3141

๐Ÿ—“๏ธย 01 Apr 2024ย 23:00:06Reported byย VulDBTypeย 
cve
ย cve
๐Ÿ”—ย web.nvd.nist.gov๐Ÿ‘ย 60ย Views๐ŸŒ WEB

Vulnerability in Clavister E10 and E80, up to 20240323, allows remote attackers to initiate cross site scripting via the manipulation of certain arguments in the Misc Settings Page, leading to the exploitation of the disclosed vulnerability

Related
Detection
Affected
Refs
Paths
Vulners
Vulnrichment
Node
clavistere10Match14.00.0
OR
clavistere10Match14.00.1
OR
clavistere10Match14.00.2
OR
clavistere10Match14.00.3
OR
clavistere10Match14.00.4
OR
clavistere10Match14.00.5
OR
clavistere10Match14.00.6
OR
clavistere10Match14.00.7
OR
clavistere10Match14.00.8
OR
clavistere10Match14.00.9
OR
clavistere10Match14.00.10
OR
clavistere80Match14.00.0
OR
clavistere80Match14.00.1
OR
clavistere80Match14.00.2
OR
clavistere80Match14.00.3
OR
clavistere80Match14.00.4
OR
clavistere80Match14.00.5
OR
clavistere80Match14.00.6
OR
clavistere80Match14.00.7
OR
clavistere80Match14.00.8
OR
clavistere80Match14.00.9
OR
clavistere80Match14.00.10
[
  {
    "vendor": "Clavister",
    "product": "E10",
    "versions": [
      {
        "version": "14.00.0",
        "status": "affected"
      },
      {
        "version": "14.00.1",
        "status": "affected"
      },
      {
        "version": "14.00.2",
        "status": "affected"
      },
      {
        "version": "14.00.3",
        "status": "affected"
      },
      {
        "version": "14.00.4",
        "status": "affected"
      },
      {
        "version": "14.00.5",
        "status": "affected"
      },
      {
        "version": "14.00.6",
        "status": "affected"
      },
      {
        "version": "14.00.7",
        "status": "affected"
      },
      {
        "version": "14.00.8",
        "status": "affected"
      },
      {
        "version": "14.00.9",
        "status": "affected"
      },
      {
        "version": "14.00.10",
        "status": "affected"
      }
    ],
    "modules": [
      "Misc Settings Page"
    ]
  },
  {
    "vendor": "Clavister",
    "product": "E80",
    "versions": [
      {
        "version": "14.00.0",
        "status": "affected"
      },
      {
        "version": "14.00.1",
        "status": "affected"
      },
      {
        "version": "14.00.2",
        "status": "affected"
      },
      {
        "version": "14.00.3",
        "status": "affected"
      },
      {
        "version": "14.00.4",
        "status": "affected"
      },
      {
        "version": "14.00.5",
        "status": "affected"
      },
      {
        "version": "14.00.6",
        "status": "affected"
      },
      {
        "version": "14.00.7",
        "status": "affected"
      },
      {
        "version": "14.00.8",
        "status": "affected"
      },
      {
        "version": "14.00.9",
        "status": "affected"
      },
      {
        "version": "14.00.10",
        "status": "affected"
      }
    ],
    "modules": [
      "Misc Settings Page"
    ]
  }
]
ParameterPositionPathDescriptionCWE
WatchdogTimerTimequery param/?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettingsCross-site scripting via manipulation of settings parameters in the vulnerable endpoint.CWE-79
BufFloodRebootTimequery param/?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettingsCross-site scripting via manipulation of settings parameters in the vulnerable endpoint.CWE-79
MaxPipeUsersquery param/?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettingsCross-site scripting via manipulation of settings parameters in the vulnerable endpoint.CWE-79
AVCache Lifetimequery param/?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettingsCross-site scripting via manipulation of settings parameters in the vulnerable endpoint.CWE-79
HTTPipeliningMaxReqquery param/?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettingsCross-site scripting via manipulation of settings parameters in the vulnerable endpoint.CWE-79
Reassembly MaxConnectionsquery param/?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettingsCross-site scripting via manipulation of settings parameters in the vulnerable endpoint.CWE-79
Reassembly MaxProcessingMemquery param/?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettingsCross-site scripting via manipulation of settings parameters in the vulnerable endpoint.CWE-79
ScrSaveTimequery param/?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettingsCross-site scripting via manipulation of settings parameters in the vulnerable endpoint.CWE-79

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

15 Apr 2026 00:35Current
3.5Low risk
Vulners AI Score3.5
CVSS 3.12.4
CVSS 23.3
CVSS 32.4
EPSS0.00193
SSVC
60