CVE-2024-31975

n/a / n/a PUBLISHED

Description (CNA)

EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters. JavaScript embedded into a vulnerable field is executed when the user clicks the SSID field's corresponding EDIT button.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/actuator/cve/blob/main/Engenius/CVE-2024-31975

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.