CVE-2024-34923: XSS
In Avocent DSR2030 Appliance firmware 03.04.00.07 before 03.07.01.23, and SVIP1020 Appliance firmware 01.06.00.03 before 01.07.00.00, there is reflected cross-site scripting (XSS).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34923?
CVE-2024-34923 has a moderate severity rating due to its potential for reflected cross-site scripting (XSS) exploitation.
How do I fix CVE-2024-34923?
To fix CVE-2024-34923, upgrade the Avocent DSR2030 Appliance firmware to version 03.07.01.23 or higher, and the SVIP1020 Appliance firmware to version 01.07.00.00 or higher.
What products are affected by CVE-2024-34923?
CVE-2024-34923 affects the Avocent DSR2030 Appliance firmware versions before 03.07.01.23 and the SVIP1020 Appliance firmware versions before 01.07.00.00.
What happens if I don't address CVE-2024-34923?
If CVE-2024-34923 is not addressed, attackers could exploit the reflected XSS vulnerability to execute malicious scripts in the context of users' sessions.
Is there a workaround for CVE-2024-34923?
Currently, there are no official workarounds for CVE-2024-34923; upgrading to the latest firmware is the recommended solution.