CVE-2024-36140

A vulnerability has been identified in OZW672 All versions V5.2, OZW772 All versions V5.2. The user accounts tab of affected devices is vulnerable to stored cross-site scripting XSS attacks. This could allow an authenticated remote attacker to inject arbitrary JavaScript code that is later execut...

CVE-2024-36140: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in OZW672 All versions V5.2, OZW772 All versions V5.2. The user accounts tab of affected devices is vulnerable to stored cross-site scripting XSS attacks. This could allow an authenticated remote attacker to inject arbitrary JavaScript code that is later execut...

PT-2024-8723

Name of the Vulnerable Software and Affected Versions OZW672 versions prior to V5.2 OZW772 versions prior to V5.2 Description The issue is related to the lack of protection for the web page structure in the affected devices, allowing for stored cross-site scripting XSS attacks. This could enable ...