cve/2024/CVE-2024-31971.md
2024-08-05 18:41:32 +00:00

847 B

CVE-2024-31971

Description

UNSUPPORTED WHEN ASSIGNED Multiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote attackers to inject arbitrary JavaScript, as demonstrated by /mainPassword.html, /processIdentity.html, /public.html, /dhcp.html, /private.html, /hostname.html, /connectivity.html, /NetworkMonitor.html, /trafficMonitoringConfig.html, and /wizardMain.html.

POC

Reference

No PoCs from references.

Github