CVE-2024-6108

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Jun 18, 2024
Updated: Jun 25, 2024
CWE ID 80

Summary

CVE-2024-6108 is a newly identified vulnerability affecting the Genexis Tilgin Home Gateway 322_AS0500-03_05_13_05. This issue impacts an unspecified function within the /vood/cgi-bin/vood_view.cgi?act=index&lang=EN# component of the Login system. An attacker can exploit this cross-site scripting (XSS) vulnerability by manipulating the errmsg argument, allowing them to inject malicious scripts. The attack can be executed remotely, making it a significant threat. The vulnerability has been assigned the identifier VDB-268854, and efforts to alert the vendor about the issue have gone unanswered.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share