CVE-2024-26157

Summary

CVE-2024-26157 is a reflected cross-site scripting (XSS) vulnerability affecting all versions of ETIC Telecom Remote Access Server (RAS) before 4.5.0. The issue lies in the get view method under the view parameter of the ETIC RAS web server. This vulnerability allows malicious actors to inject malicious scripts into the server's response, which can then be executed in the user's browser when they visit a specially crafted webpage. The ETIC RAS web server dynamically generates pages from user input, making it susceptible to XSS attacks by reflecting the malicious code back to the user.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.