Feb. 3, 2023, 6:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

** UNSUPPORTED WHEN ASSIGNED ** Cross Site Scripting (XSS) vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address this issue.

address attackers code cross site scripting cve end firmware firmware updates information issue life name product run scripting settings states system updates vulnerability xss

SAP Security Administrator

@ FARO Technologies | Americas-US-Lake Mary-125 Bldg

Cloud Security Engineer, Specialist

@ Vanguard | Malvern, PA

Cybersecurity Assessment and Authorization Specialist

@ Booz Allen Hamilton | USA, MD, Bethesda (9000 Rockville Pike)

Network Security Specialist

@ IAG GBS | Madrid, Spain

Information System Security Officer

@ CSEngineering | Nellis Air Force Base, NV, USA

Senior Consultant, Risk and Governance

@ CIBC | Toronto-CC East 11th Floor