Description
Uniview NVR301-04S2-P4 is vulnerable to reflected cross-site scripting attack (XSS). An attacker could send a user a URL that if clicked on could execute malicious JavaScript in their browser. This vulnerability also requires authentication before it can be exploited, so the scope and severity is limited. Also, even if JavaScript is executed, no additional benefits are obtained.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Uniview | NVR301-04S2-P4 | < NVR-B3801.20.17.240507 | NVR-B3801.20.17.240507 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Uniview NVR301-04S2-P4 - Cross-Site Scripting http/cves/2024/CVE-2024-3850.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- ICSA-24-156-01 Uniview NVR301-04S2-P4 (Update A) CISA ICS & IT advisories · Sep 24, 2024