CVE-2024-45836
Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the web browser of the user.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2024-09-26
- Last modified
- 2025-03-25
- Weaknesses
- CWE-79
Affected products
- Cs-qr10 Firmware (Planex)
- Cs-qr20 Firmware (Planex)
- Cs-qr220 Firmware (Planex)
- Cs-qr22 Firmware (Planex)
- Cs-qr300 Firmware (Planex)
- Cs-qr10 (Planex Communications Inc.)
- Cs-qr20 (Planex Communications Inc.)
- Cs-qr22 (Planex Communications Inc.)
- Cs-qr220 (Planex Communications Inc.)
- Cs-qr300 (Planex Communications Inc.)
References
- https://jvn.jp/en/jp/JVN81966868/
