CVE-2024-55545

Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

Score

CVSS 4.0 7.1 High

Status

Modified - office@cyberdanube.com

Published

2024-12-10

Last modified

2025-11-03

Weaknesses

CWE-79

Affected products

• Iap-420 (Oring)
• Iap-420 Firmware (Oringnet)

References

• https://cyberdanube.com/security-research/st-polten-uas-multiple-vulnerabilities-in-oring-iap/
• http://seclists.org/fulldisclosure/2024/Dec/3