Description (CNA)
A Cross-Site Scripting (XSS) vulnerability was identified in a parameter in Omada Controllers due to improper input sanitization. Exploitation requires advanced conditions, such as network positioning or emulating a trusted entity, and user interaction by an authenticated administrator. If successful, an attacker could execute arbitrary JavaScript in the administrator’s browser, potentially exposing sensitive information and compromising confidentiality.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TP-Link Systems Inc. / Omada Software Controller | affected 0 before 6.0.0.24 |
| TP-Link Systems Inc. / Omada OC200, OC220, OC300, OC400 | affected 0 before 6.0.0.34 |
| TP-Link Systems Inc. / Omada cloud controller | affected 0 before 6.0.0.100 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.