Description
Genexis Platinum-4410 P4410-V2-1.31A contains a stored cross-site scripting vulnerability in the 'start_addr' parameter of the Security Management interface. Attackers can inject malicious scripts through the start source address field that will persist and trigger for privileged users when they access the security management page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Genexis | Platinum-4410 | Firmware 1.31A | — |
References
- ExploitDB-49709 exploit
- Genexis Product Page product
- VulnCheck Advisory: Genexis Platinum-4410 P4410-V2-1.31A - 'start_addr' Persistent Cross-Site Scripting third-party-advisory