CVE-2024-5410

MEDIO 5.4CVE-2024-5410 · Published 28/05/2024 · updated 17/06/2026

En resumen

CVE-2024-5410 es una vulnerabilidad MEDIO (CVSS 5.4).
Probabilidad de explotación en los próximos 30 días (EPSS): 13.7%, mayor que el 96.5% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

References

seclists.org/fulldisclosure/2024/May/36 · Exploit
cyberdanube.com/en/en-multiple-vulnerabilities-in-oring-iap420 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free