CVE-2023-48383

CVE-2023-48383 affects NetVision information airPASS, specifically NetVision/airPASS path traversal via a parameter in a particular URL. Root cause is a path traversal vulnerability that allows an unauthenticated remote attacker to bypass authentication and download arbitrary system files, impact...

CVE-2024-3776

CVE-2024-3776 is a reflected XSS vulnerability in Netvision airPASS login parameter handling. An unauthenticated attacker can inject JavaScript via the login parameter due to insufficient input filtering. Documented impact is cross-site scripting with potential access to user context; exploitatio...