PT-2018-4252 · Symmetricom · Symmetricom S350I

Published 2018-01-08 · Updated 2021-09-13 · CVE-2014-5069

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Symmetricom s350i version 2.70.15

Description The issue allows remote attackers to inject arbitrary web script or HTML via vectors involving system logs, which is a cross-site scripting (XSS) vulnerability. This enables attackers to execute malicious scripts on the victim's browser.

Recommendations For Symmetricom s350i version 2.70.15, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to system logs to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2014-5069

Affected Products

Symmetricom S350I

References · 3

• 🔥 https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5069 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5069 · Security Note
• https://t.me/cvenotify/20755 · Telegram Post