CVE-2024-34582: XSS
Published May 16, 2024
·Updated
Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi useridchange XSS within the Forgot Password feature.
Affected Software
1 affected component
Sunhillo SureLine<=8.10.0
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
May 16, 2024
CVE Published
via NVD·03:15 PM
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Aug 2, 2024
Data Sourced
via MITRE·03:04 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-34582?
CVE-2024-34582 is considered a medium severity vulnerability due to its potential for cross-site scripting (XSS) exploitation.
2
How do I fix CVE-2024-34582?
To fix CVE-2024-34582, update Sunhillo SureLine to version 8.10.1 or later, which addresses the XSS issue in the Forgot Password feature.
3
Which devices are affected by CVE-2024-34582?
CVE-2024-34582 affects Sunhillo SureLine versions up to 8.10.0 on RICI 5000 devices.
4
What kind of attack does CVE-2024-34582 facilitate?
CVE-2024-34582 facilitates a cross-site scripting (XSS) attack through the userid_change function in the Forgot Password feature.
5
Is user data at risk with CVE-2024-34582?
Yes, user data can be at risk due to the potential for XSS attacks allowing unauthorized access to sensitive information.