Description
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code in the Appliance Management Console (AMC).
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Affected products
- SonicWall / SMA100012.4.3-03526 (platform-hotfix) and older versions – 12.4.3-03526 (platform-hotfix) and older versions
- SonicWall / SMA100012.5.0-02952 (platform-hotfix) and older versions – 12.5.0-02952 (platform-hotfix) and older versions
References
Updated 22m ago · 8 sources