Advantech ADAM 5550's web application includes a "logs" page where all
the HTTP requests received are displayed to the user. The device doesn't
correctly neutralize malicious code when parsing HTTP requests to
generate page output.
Metrics
Affected Vendors & Products
References
History
Mon, 07 Oct 2024 15:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Advantech
Advantech adam-5550 Advantech adam 5550-firmware |
|
CPEs | cpe:2.3:h:advantech:adam-5550:-:*:*:*:*:*:*:* cpe:2.3:o:advantech:adam_5550-firmware:-:*:*:*:*:*:*:* |
|
Vendors & Products |
Advantech
Advantech adam-5550 Advantech adam 5550-firmware |
Fri, 27 Sep 2024 18:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Fri, 27 Sep 2024 17:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output. | |
Title | Advantech ADAM-5550 Cross-site Scripting | |
Weaknesses | CWE-79 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: icscert
Published: 2024-09-27T17:28:34.284Z
Updated: 2024-09-27T18:07:54.921Z
Reserved: 2024-06-26T15:09:26.536Z
Link: CVE-2024-38308
Vulnrichment
Updated: 2024-09-27T18:07:09.449Z
NVD
Status : Analyzed
Published: 2024-09-27T18:15:04.933
Modified: 2024-10-07T15:24:34.517
Link: CVE-2024-38308
Redhat
No data.