Lucene search
PRIOn knowledge basePRION:CVE-2024-0554HistoryJan 16, 2024 - 11:15 a.m.
Cross site scripting
2024-01-1611:15:00
PRIOn knowledge base
www.prio-n.com
2
cross-site scripting
wic1200
version 1.1
authenticated user
malicious javascript payload
device model parameter
setup
diags_ir_learn.asp
session details
A Cross-site scripting (XSS) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could store a malicious javascript payload in the device model parameter via ‘/setup/diags_ir_learn.asp’, allowing the attacker to retrieve the session details of another user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wic1200_firmware | eq | 1.1 |
Related
cve
cve
CVE-2024-0554
2024-01-16 11:15:07
cvelist
cvelist
CVE-2024-0554 Cross-site scripting (XSS) vulnerability on WIC1200
2024-01-16 10:08:29
nvd
nvd
CVE-2024-0554
2024-01-16 11:15:07