PT-2013-5447 · Adtran · Adtran Aos

Publicado 2013-12-30 · Atualizado 2013-12-31 · CVE-2013-5210

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ADTRAN AOS versions prior to R10.8.1

Description A cross-site scripting (XSS) issue exists in the GUI login page, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized access or control of the system.

Recommendations For versions prior to R10.8.1, update to R10.8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the GUI login page to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-5210

Produtos afetados

Adtran Aos

Referências · 3

• https://supportforums.adtran.com/docs/DOC-6414 · Nota
• https://supportforums.adtran.com/servlet/JiveServlet/downloadBody/6414-102-3-7862/NetVanta%207000%20Series%20Products%20AOS%20R10.8.1%20Release%20Notes.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-5210 · Nota de Segurança