Medium · 5.5 CVE-2024-38380 EUVD-2024-37287GHSA-xr64-7w22-vxqw

Millbeck Communications Proroute H685t-w Cross-site Scripting.

Published Sep 17, 2024 · Updated Sep 17, 2024 · Assigned by icscert

Vendor: Millbeck Communications Product: Proroute H685t-w

Description

This vulnerability occurs when user-supplied input is improperly sanitized and then reflected back to the user's browser, allowing an attacker to execute arbitrary JavaScript in the context of the victim's browser session.

Affected products

Vendor	Product	Affected	Fixed
Millbeck Communications	Proroute H685t-w	3.2.334	—

Advisories 1

ICSA-24-261-02 Millbeck Communications Proroute H685t-w CISA ICS & IT advisories · Sep 17, 2024

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-261-02