Description
Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting (XSS)..This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SEH Computertechnik | utnserver Pro | ≤ 20.1.22 | — |
| SEH Computertechnik | utnserver ProMAX | ≤ 20.1.22 | — |
| SEH Computertechnik | INU-100 | ≤ 20.1.22 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
gh-ost00/CVE-2024-5420-XSS ★ 3 · Sep 2, 2024
SEH utnserver Pro/ProMAX / INU-100 20.1.22 - XSS
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- SEH utnserver Pro/ProMAX/INU-100 20.1.22 - Cross-Site Scripting http/cves/2024/CVE-2024-5420.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.