CVE-2024-41910

2024-08-0614:16:04

CWE-79

[email protected]

web.nvd.nist.gov

cve-2024-41910

firmware vulnerability

poly clariti manager

xxs vulnerabilities

javascript

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

Percentile

16.6%

JSON

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware contained multiple XSS vulnerabilities in the version of JavaScript used.

Affected configurations

Nvd

Node

hppoly_clariti_manager_firmwareRange≤10.10.2.2

AND

hppoly_clariti_managerMatch-

VendorProductVersionCPE
hppoly_clariti_manager_firmware*cpe:2.3:o:hp:poly_clariti_manager_firmware:*:*:*:*:*:*:*:*
hppoly_clariti_manager-cpe:2.3:h:hp:poly_clariti_manager:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	poly_clariti_manager_firmware	*	cpe:2.3:o:hp:poly_clariti_manager_firmware::::::::
hp	poly_clariti_manager	-	cpe:2.3:h:hp:poly_clariti_manager:-:::::::*