CVE-2024-45836 — PLANEX COMMUNICATIONS INC. / CS-QR10

Description (CNA)

Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the web browser of the user.

Affected (CNA)

Vendor / product	Versions
PLANEX COMMUNICATIONS INC. / CS-QR10	affected all firmware versions
PLANEX COMMUNICATIONS INC. / CS-QR20	affected all firmware versions
PLANEX COMMUNICATIONS INC. / CS-QR22	affected all firmware versions
PLANEX COMMUNICATIONS INC. / CS-QR220	affected all firmware versions
PLANEX COMMUNICATIONS INC. / CS-QR300	affected all firmware versions

CWE

CWE-79

References

https://jvn.jp/en/jp/JVN81966868/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.