CVE-2024-31971

July 24, 2024, 5:12 p.m.

Product(s) Impacted

AdTran NetVanta 3120

  • 18.01.01.00.E

Description

Multiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote attackers to inject arbitrary JavaScript, as demonstrated by /mainPassword.html, /processIdentity.html, /public.html, /dhcp.html, /private.html, /hostname.html, /connectivity.html, /NetworkMonitor.html, /trafficMonitoringConfig.html, and /wizardMain.html.

Weaknesses

Date

Published: July 24, 2024, 3:15 p.m.

Last Modified: July 24, 2024, 5:12 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References