PT-2024-27825 · Unknown · Wbsairback

Alejandro Amorín Niño + 3 · Published 2024-04-15 · Updated 2025-04-10 · CVE-2024-3792

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WBSAirback version 21.02.04

Description The issue is a stored Cross-Site Scripting (XSS) vulnerability, which occurs through the /admin/DeviceReplication endpoint, specifically in the execution range field, and affects all parameters. This could allow a remote user to send a specially crafted URL to the victim and steal their session data.

Recommendations For WBSAirback version 21.02.04, consider disabling access to the /admin/DeviceReplication endpoint until a patch is available. As a temporary workaround, restrict the execution range field to minimize the risk of exploitation. Avoid using all parameters in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-3792

Affected Products

Wbsairback

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-3792 · Security Note
• https://osv.dev/vulnerability/CVE-2024-3792 · Vendor Advisory
• https://twitter.com/CVEnew/status/1779879081770938812 · Twitter Post
• https://t.me/cvenotify/118713 · Telegram Post
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-wbsairback-white-bear-solutions · Note