2 results (0.001 seconds)
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-38308 – Advantech ADAM-5550 Cross-site Scripting
https://notcve.org/view.php?id=CVE-2024-38308
Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output. • https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-01 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-37187 – Advantech ADAM-5550 Weak Encoding for Password
https://notcve.org/view.php?id=CVE-2024-37187
Advantech ADAM-5550 share user credentials with a low level of encryption, consisting of base 64 encoding. • https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-01 • CWE-261: Weak Encoding for Password •