CVE-2019-9725

The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-03-12

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Jetport 5601 Firmware (Korenix)
• Jetport 5601f Firmware (Korenix)
• Jetport Web Manager (Korenix)

References

• https://medium.com/%40bertinjoseb/korenix-jetport-web-manager-persistent-xss-6cf7e2a38634