Security Research

CVE-2024-5420 SEH UTN Server XSS: cross-site scripting in USB device management interface

Thinking 2024-08-15 2 min read Research Dossier
#Vulnerability Analysis#Code Audit#Web Security
Dark dossier of USB device management panel and script injection

The SEH UTN Server’s USB device management web interface does not filter user input. An attacker crafts a malicious URL to inject JavaScript and steal the admin session.

Unlock to view this content.