Vulnerability · Published Jul 15, 2024 · Assigned by twcert
CVE-2024-6742AguardNet Space Management System - Reflected Cross-Site Scripting
Medium 5.4
In plain English
A medium-severity cross-site scripting in Space Management System from AguardNet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.3%top 78.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and perform Reflected Cross-site scripting attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AguardNet | Space Management System | all – before 2024-04-09-3302 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
References
- https://www.twcert.org.tw/tw/cp-132-7930-e0368-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-7931-608eb-2.html third-party-advisory