PT-2024-13013 · Kiloview · P1/P2+4

Published 2024-07-02 · Updated 2024-07-03 · CVE-2023-41922

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A Cross-site Scripting (XSS) vulnerability has been discovered, characterized by improper input neutralization during web page generation. This vulnerability allows for Stored XSS attacks to occur. Multiple areas within the administration interface of the webserver lack adequate input validation, resulting in multiple instances of Stored XSS vulnerabilities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-41922

Affected Products

P1/P2

P1 4G Video Encoder Firmware

P1 Firmware

P2 4G Video Encoder Firmware

P2 Firmware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-41922 · Security Note
• https://t.me/cvenotify/85139 · Telegram Post
• https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273 · Note