Skip to content
OpenAdvisories
Medium · 4.6 CVE-2024-9477 EUVD-2024-49968GHSA-r29r-jxx6-7ff5

XSS in AirTies' Air4443 Firmware

Published Nov 13, 2024 · Updated Jun 2, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS).

This issue affects Air4443 Firmware: through 14102024.

NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support.

Affected products

VendorProductAffectedFixed
AirTies Air4443 Firmware ≤ 1.6.1.6 —

References