CVE-2024-36392: Improper Neutralization of Input During Web Page Generation

MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Milesight DeviceHub Code Execution

The vulnerability of the MileSight DeviceHub deployment platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

PT-2024-3802

Name of the Vulnerable Software and Affected Versions MileSight DeviceHub affected versions not specified Description The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. This allows a remote attacker to execute arbitrary cod...

PT-2024-3996

Name of the Vulnerable Software and Affected Versions MileSight DeviceHub affected versions not specified Description The issue is related to improper input validation, which may allow a denial of service. This can be exploited by a remote attacker. There is no information provided about the...

PT-2024-3992

Name of the Vulnerable Software and Affected Versions MileSight DeviceHub affected versions not specified Description The issue is related to errors in authentication, which can allow a remote attacker to execute arbitrary code. This is a critical function missing authentication, potentially...

PT-2024-3993

Name of the Vulnerable Software and Affected Versions MileSight DeviceHub affected versions not specified Description The issue exists due to improper limitation of a pathname to a restricted directory, which may allow an unauthenticated remote attacker to execute arbitrary code. This is a result...

PT-2024-3995

Name of the Vulnerable Software and Affected Versions MileSight DeviceHub affected versions not specified Description The issue is related to key management errors, which may allow authentication bypass and man-in-the-middle traffic. This could enable a remote attacker to perform a...

PT-2024-3994

Name of the Vulnerable Software and Affected Versions MileSight DeviceHub affected versions not specified Description The issue is related to the use of insufficiently random values, which may allow authentication bypass. This could enable a remote attacker to execute arbitrary code...