CVE-2024-51187

Summary

CVE-2024-51187 is a Store Cross-site scripting (XSS) vulnerability affecting TRENDnet TEW-651BR v2.04B1, TEW-652BRP v3.04b01, and TEW-652BRU v1.00b12 devices. Maliciously crafted input can be injected through the firewallRule_Name_1.1.1.0.0 parameter on the /firewall_setting.htm page, potentially allowing attackers to execute arbitrary scripts in the browsers of unsuspecting users who visit affected pages. This issue poses a significant risk for confidential data theft and unauthorized account access. Users are advised to update their devices to the latest firmware as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.