CVE-2024-36397

June 16, 2024, 8:15 a.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Vantiva MediaAccess DGA2232

  • v19.4

Source

cna@cyber.gov.il

Tags

CVE-2024-36397 details

Published : June 16, 2024, 8:15 a.m.
Last Modified : June 16, 2024, 8:15 a.m.

Description

Vantiva - MediaAccess DGA2232 v19.4 - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS Score

1 2 3 4 5 6.1 7 8 9 10

Weakness

Weakness Name Description

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

Base Score

6.1

Exploitability Score

Impact Score

Base Severity

MEDIUM

References

URL Source
https://www.gov.il/en/Departments/faq/cve_advisories cna@cyber.gov.il
This website uses the NVD API, but is not approved or certified by it.