PT-2024-23892 · Zebra · Zebra Ztc Gk420D

Strik3R · Published 2024-04-01 · Updated 2024-05-17 · CVE-2024-3125

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Zebra ZTC GK420d version 1.0

Description A problematic issue was found in the Alert Setup Page component, specifically affecting the /settings file. The manipulation of the Address argument leads to cross-site scripting. This issue can be initiated remotely. The exploit has been disclosed publicly.

Recommendations For Zebra ZTC GK420d version 1.0, as a temporary workaround, consider restricting access to the Alert Setup Page or disabling the manipulation of the Address argument until a fix is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-3125

Affected Products

Zebra Ztc Gk420D

References · 6

• 🔥 https://github.com/strik3r0x1/Vulns/blob/main/ZTC_GK420d-SXSS.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-3125 · Security Note
• https://vuldb.com/?submit.303446 · Note
• https://t.me/cvenotify/75340 · Telegram Post
• https://vuldb.com/?ctiid.258868 · Note
• https://vuldb.com/?id.258868 · Note