First published: Mon Dec 28 2009(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the login_username vector for Forms/login1 is already covered by CVE-2009-4406.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
APC Network Management Card | ||
Apc Switched Rack Pdu Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-1798 is considered a critical vulnerability due to its potential for unauthorized remote access and script injection.
To mitigate CVE-2009-1798, it is recommended to update the firmware of affected APC devices to the latest version.
CVE-2009-1798 affects the Network Management Card and Switched Rack PDU devices from American Power Conversion (APC).
The risks include unauthorized access to devices and the ability for attackers to inject malicious scripts that could compromise system integrity.
You can identify vulnerability by checking if your APC Network Management Card or Switched Rack PDU firmware version is older than the patched version for CVE-2009-1798.