XSS Vulnerability in ZTE OTCP Product

CVE-2019-3414

What is CVE-2019-3414?

The ZTE OTCP product, up to version V1.19.20.02, is vulnerable to Cross-Site Scripting (XSS). An attacker can exploit this flaw by injecting malicious scripts through parameters in the security management interface. If the front end fails to properly sanitize the returned results, the malicious code may execute within the user's browser context, leading to potential theft of cookies or sensitive user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References