Security Advisory

CVE-2024-31972

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-30 00:00:00

Last updated 2024-10-31 15:56:37

Assigner mitre

State PUBLISHED

Description

EnGenius ESR580 A8J-EMR5000 devices allow a remote attacker to conduct stored XSS attacks that could lead to arbitrary JavaScript code execution (under the context of the users session) via the Wi-Fi SSID input fields. Web scripts embedded into the vulnerable fields this way are executed immediately when a user logs into the admin page. This affects /admin/wifi/wlan1 and /admin/wifi/wlan_guest.

← Browse all CVEs View on cve.org ↗