CVE-2024-5410

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
May 28, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-541007.5Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause featuresCVE-2024-541015.5Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availabilCVE-2024-541025.9Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-541037.5Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidCVE-2024-541047.5Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-541057.5Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-541067.5Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availaCVE-2024-541077.5Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-541087.5Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-541097.5Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-54118.8Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.TCVE-2024-541107.5Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service
CVE-2024-5410: Medium severity, CVSS 5.4 | Vulnix