CVE-2024-31414
CVSS V2 None
CVSS V3 None
Description
The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages. However, the input fields for this feature in the Eaton Foreseer software lacked proper input sanitization on the server-side, which could lead to injection and execution of malicious scripts when abused by bad actors.
Overview
- CVE ID
- CVE-2024-31414
- Assigner
- Eaton
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-09-13T16:46:51.010Z
- Last Modified Date
- 2024-09-13T17:35:46.770Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2024-1008.pdf |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-31414 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31414 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-09-14 13:02:25 | Added to TrackCVE |