Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-31971 EUVD-2024-29829GHSA-jm9w-pgx2-583g

Multiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote attackers to inject a…

Published Jul 24, 2024 · Updated Nov 6, 2024 · Assigned by mitre

Description

Multiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote attackers to inject arbitrary JavaScript, as demonstrated by /mainPassword.html, /processIdentity.html, /public.html, /dhcp.html, /private.html, /hostname.html, /connectivity.html, /NetworkMonitor.html, /trafficMonitoringConfig.html, and /wizardMain.html.

References