CVE-2024-9477 | THREATINT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS).This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support.

Reserved 2024-10-03 | Published 2024-11-13 | Updated 2024-11-13 | Assigner TR-CERT

MEDIUM: 4.6CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

Default status

affected

Any version

affected

Credits

Goktug KAYA finder

References

www.usom.gov.tr/bildirim/tr-24-1851

cve.org (CVE-2024-9477)

nvd.nist.gov (CVE-2024-9477)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase

Subscribe to our newsletter to learn more about our work.