CVE:CVE-2019-9725
CNNVD:CNNVD-201903-356
Korenix JetPort 5601和5601f中的Web管理页面存在跨站脚本漏洞。远程攻击者可借助Serial Setting下的Port Alias字段利用该漏洞注入HTML或脚本。
solution:Upgrade korenix jetport_web_manager to a higher version than -; Upgrade korenix jetport_5601_firmware to a higher version than -; Upgrade korenix jetport_5601f_firmware to a higher version than -