CVE Feed

    Dashboard / CVE / CVE-2024-26157

    CVE-2024-26157

    All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting (XSS) attacks in get view method under view parameter. The ETIC RAS web server uses dynamic pages that get their input from the client side and reflect the input in their response to the client.

    Published:Jan 17, 2025
    Last Modified:Jul 31, 2025
    EPS:Jan 17, 2025
    EPSS Score:0.00054
    CVSS Score:6.1

    Affected Products

    Vendor
    Etictelecom
    Product
    Remote Access Server Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-26153 (CVSS 6.3) — All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19 are vulnerable to cross-site request …
    CVE-2024-26155 (CVSS 6.1) — All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 expose clear text credentials in the w…
    CVE-2024-26154 (CVSS 4.8) — All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site…
    CVE-2024-26156 (CVSS 4.8) — All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site…
    CVE-2023-3453 (CVSS 7.1) — ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This …
    CVE-2022-3703 (CVSS 7.6) — All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to acceptin…
    CVE-2022-40981 (CVSS 5.9) — All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior is vulnerable to malicious file upload…
    CVE-2022-41607 (CVSS 6.2) — All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s application programmable interface (…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High