CVE-2019-14456

Opengear console server firmware releases prior to 4.5.0 have a stored XSS vulnerability related to serial port logging

published July 31, 2019

CVSS
—
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

Opengear console server firmware releases prior to 4.5.0 have a stored XSS vulnerability related to serial port logging. If a malicious user of an external system (connected to a serial port on an Opengear console server) sends crafted text to a serial port (that has logging enabled), the text will be replayed when the logs are viewed. Exploiting this vulnerability requires access to the serial port and/or console server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00649 · 50.4th percentile
Published
2019-07-31T20:17Z
EPSS history
Timeline
  • 31 JUL 20:17Z
    Opengear console server firmware releases prior to 4.5.0 have a stored XSS vulnerability related to serial port logging
    cvelistv5