CVE-2024-48197

Reflected XSS in AudioCodes MP-202b

[Description]

Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface.

[Additional Information]

N/A

[Vulnerability Type]

Cross Site Scripting (XSS) Reflected

[Vendor of Product]

Audiocodes

[Affected Product Code Base]

MP-202b - 4.4.3

[Affected Component]

Login page of the web interface for the device

[Attack Type]

Remote

[Impact Escalation of Privileges]

true

[Attack Vectors]

A user must be coerced into logging into the application with a specially crafted URL supplied. The specially crafted URL can then be used to capture login details.

[Discovered By]

Gareth C - AnchorSec