ICS ORing IAP-420 Stored Cross-Site Scripting (CVE-2024-5410)

Rule ID

1235036

Severity

Medium

Description

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

Impact

Cross-site scripting

Recommendation

Update vendor's patch.

IPS Category

ICS threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A