Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistVulDBCVELIST:CVE-2024-3141
HistoryApr 01, 2024 - 11:00 p.m.

CVE-2024-3141 Clavister E10/E80 Misc Settings Page MiscSettings cross site scripting

2024-04-0123:00:06
CWE-79
VulDB
www.cve.org
3
clavister e10
e80
vulnerability
misc settings page
cross site scripting
upgrade
vdb-258916

CVSS2

3.3

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:M/C:N/I:P/A:N

CVSS3

2.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

AI Score

4

Confidence

High

EPSS

0

Percentile

10.3%

JSON

A vulnerability has been found in Clavister E10 and E80 up to 14.00.10 and classified as problematic. This vulnerability affects unknown code of the file /?Page=Node&OBJ=/System/AdvancedSettings/DeviceSettings/MiscSettings of the component Misc Settings Page. The manipulation of the argument WatchdogTimerTime/BufFloodRebootTime/MaxPipeUsers/AVCache Lifetime/HTTPipeliningMaxReq/Reassembly MaxConnections/Reassembly MaxProcessingMem/ScrSaveTime leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 14.00.11 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-258916.

CNA Affected

[
  {
    "vendor": "Clavister",
    "product": "E10",
    "versions": [
      {
        "version": "14.00.0",
        "status": "affected"
      },
      {
        "version": "14.00.1",
        "status": "affected"
      },
      {
        "version": "14.00.2",
        "status": "affected"
      },
      {
        "version": "14.00.3",
        "status": "affected"
      },
      {
        "version": "14.00.4",
        "status": "affected"
      },
      {
        "version": "14.00.5",
        "status": "affected"
      },
      {
        "version": "14.00.6",
        "status": "affected"
      },
      {
        "version": "14.00.7",
        "status": "affected"
      },
      {
        "version": "14.00.8",
        "status": "affected"
      },
      {
        "version": "14.00.9",
        "status": "affected"
      },
      {
        "version": "14.00.10",
        "status": "affected"
      }
    ],
    "modules": [
      "Misc Settings Page"
    ]
  },
  {
    "vendor": "Clavister",
    "product": "E80",
    "versions": [
      {
        "version": "14.00.0",
        "status": "affected"
      },
      {
        "version": "14.00.1",
        "status": "affected"
      },
      {
        "version": "14.00.2",
        "status": "affected"
      },
      {
        "version": "14.00.3",
        "status": "affected"
      },
      {
        "version": "14.00.4",
        "status": "affected"
      },
      {
        "version": "14.00.5",
        "status": "affected"
      },
      {
        "version": "14.00.6",
        "status": "affected"
      },
      {
        "version": "14.00.7",
        "status": "affected"
      },
      {
        "version": "14.00.8",
        "status": "affected"
      },
      {
        "version": "14.00.9",
        "status": "affected"
      },
      {
        "version": "14.00.10",
        "status": "affected"
      }
    ],
    "modules": [
      "Misc Settings Page"
    ]
  }
]

Related

cve 1
nvd 1
vulnrichment 1
cve
cve
CVE-2024-3141
2024-04-01 23:15:10
nvd
nvd
CVE-2024-3141
2024-04-01 23:15:10
vulnrichment
vulnrichment
CVE-2024-3141 Clavister E10/E80 Misc Settings Page MiscSettings cross site scripting
2024-04-01 23:00:06

CVSS2

3.3

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:M/C:N/I:P/A:N

CVSS3

2.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

AI Score

4

Confidence

High

EPSS

0

Percentile

10.3%

JSON
Related for CVELIST:CVE-2024-3141
cve1nvd1vulnrichment1