CVEvulnerability

CVE-2024-45177

5.4 MEDIUM Published 2024-09-04 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2024-09-04
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses: CWE-79

Description

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper input validation, the C-MOR web interface is vulnerable to persistent cross-site scripting (XSS) attacks. It was found out that the camera configuration is vulnerable to a persistent cross-site scripting attack due to insufficient user input validation.

Affected configurations

• c-mor c-mor video surveillance 5.2401 • c-mor c-mor video surveillance 6.00

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-021.txt Exploit, Vendor Advisory
https://www.syss.de/pentest-blog/mehrere-sicherheitsschwachstellen-in-videoueberwachungssoftware-c-mor-syss-2024-020-bis-030 Vendor Advisory
http://seclists.org/fulldisclosure/2024/Sep/9 Exploit, Mailing List, Third Party Advisory

CVE-2024-45177

Description

Affected configurations

Related

Weakness · CWE (1)

References