Medium severity5.4NVD Advisory· Published Sep 4, 2024· Updated Jun 17, 2026
CVE-2024-45177
CVE-2024-45177
Description
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper input validation, the C-MOR web interface is vulnerable to persistent cross-site scripting (XSS) attacks. It was found out that the camera configuration is vulnerable to a persistent cross-site scripting attack due to insufficient user input validation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:c-mor:c-mor_video_surveillance:5.2401:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:c-mor:c-mor_video_surveillance:5.2401:*:*:*:*:*:*:*
- cpe:2.3:a:c-mor:c-mor_video_surveillance:6.00:patch_level_01:*:*:*:*:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 5.2401, 6.00PL01
Patches
Vulnerability mechanics
References
3- seclists.org/fulldisclosure/2024/Sep/9nvdExploitMailing ListThird Party Advisory
- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-021.txtnvdExploitVendor Advisory
- www.syss.de/pentest-blog/mehrere-sicherheitsschwachstellen-in-videoueberwachungssoftware-c-mor-syss-2024-020-bis-030nvdVendor Advisory
News mentions
0No linked articles in our index yet.