CVE-2019-14456

MEDIO 5.4CVE-2019-14456 · Published 31/07/2019 · updated 17/06/2026

In breve

CVE-2019-14456 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda opengear (opengear).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.65%, superiore al 51.3% delle vulnerabilità.
Correzione: aggiornare a 4.5.0 o successiva.

Package	Affected versions	Patched versions
opengear opengear	`< 4.5.0`	`4.5.0`

Description

Opengear console server firmware releases prior to 4.5.0 have a stored XSS vulnerability related to serial port logging. If a malicious user of an external system (connected to a serial port on an Opengear console server) sends crafted text to a serial port (that has logging enabled), the text will be replayed when the logs are viewed. Exploiting this vulnerability requires access to the serial port and/or console server.

References

opengear.zendesk.com/hc/en-us/articles/360029189391-Stored-cross-site-scripting-XSS-vulnerability-in-serial-port-logging · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free