CVE-2024-45836: medium-severity vulnerability in PLANEX COMMUNICATIONS INC. CS-QR10
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.1epss 0.3%
Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the web browser of the user.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
PLANEX COMMUNICATIONS INC. · CS-QR10PLANEX COMMUNICATIONS INC. · CS-QR20PLANEX COMMUNICATIONS INC. · CS-QR22PLANEX COMMUNICATIONS INC. · CS-QR220PLANEX COMMUNICATIONS INC. · CS-QR300References
https://jvn.jp/en/jp/JVN81966868/