PT-2022-7367 · Avocent · Avocent Dsr2030+1

Kiryukhin Dmitry + 2 · Published 2022-03-10 · Updated 2024-12-02 · CVE-2024-34923

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Avocent DSR2030 versions 03.04.00.07 through 03.07.01.22 Avocent SVIP1020 versions 01.06.00.03 through 01.06.00.03

Description The issue exists due to inadequate protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting (XSS) attack. This is a reflected cross-site scripting vulnerability.

Recommendations For Avocent DSR2030 versions 03.04.00.07 through 03.07.01.22, update to version 03.07.01.23 or later. For Avocent SVIP1020 versions 01.06.00.03, update to version 01.07.00.00 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2024-04286

CVE-2024-34923

Affected Products

Avocent Dsr2030

Avocent Svip1020

References · 8

• https://bdu.fstec.ru/vul/2024-04286 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-34923 · Security Note
• https://t.me/cvenotify/81101 · Telegram Post
• https://t.me/cvenotify/102809 · Telegram Post
• https://vuldb.com/?id.266370 · Note
• https://tenable.com/cve/CVE-2024-34923 · Note
• https://github.com/Ka1ne1/ka1ne1.github.io/blob/main/avocent_xss.html · Note
• https://ka1ne1.github.io/avocent_xss.html · Note