CVE-2024-36140: XSS
First published: Tue Nov 12 2024(Updated: )
A vulnerability has been identified in OZW672 (All versions < V5.2), OZW772 (All versions < V5.2). The user accounts tab of affected devices is vulnerable to stored cross-site scripting (XSS) attacks. This could allow an authenticated remote attacker to inject arbitrary JavaScript code that is later executed by another authenticated victim user with potential higher privileges than the attacker.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Siemens Ozw672 Firmware | <5.2 | |
| Siemens OZW672 | ||
| All of | ||
| Siemens Ozw772 Firmware | <5.2 | |
| Siemens Ozw772 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- vendor/siemens
- canonical/siemens ozw672 firmware
- canonical/siemens ozw672
- canonical/siemens ozw772 firmware
- canonical/siemens ozw772