PT-2018-4252 · Symmetricom · Symmetricom S350I

Publicado 2018-01-08 · Atualizado 2021-09-13 · CVE-2014-5069

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Symmetricom s350i version 2.70.15

Description The issue allows remote attackers to inject arbitrary web script or HTML via vectors involving system logs, which is a cross-site scripting (XSS) vulnerability. This enables attackers to execute malicious scripts on the victim's browser.

Recommendations For Symmetricom s350i version 2.70.15, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to system logs to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-5069

Produtos afetados

Symmetricom S350I

Referências · 3

• 🔥 https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5069 · Exploit
• https://t.me/cvenotify/20755 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2014-5069 · Nota de Segurança