CVE-2024-9477CWE-79

XSS in AirTies' Air4443 Firmware

Medium · published November 13, 2024

CVSS v4.0
4.6
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS).

This issue affects Air4443 Firmware: through 14102024.

NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support.

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L
EPSS
0.00203 · 9.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-11-13T14:29Z
EPSS history
Timeline
  • 13 NOV 14:29Z
    XSS in AirTies' Air4443 Firmware
    cvelistv5