CVE-2024-6742: AguardNet Space Management System - Reflected Cross-Site Scripting

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-15 · updated 2026-06-17
Weakness: CWE-79

Description

AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and perform Reflected Cross-site scripting attacks.

Affected products

AguardNet Space Management System: before 2024-04-09-3302 — fixed in 2024-04-09-3302

How to fix

Upgrade to a fixed version: AguardNet Space Management System 2024-04-09-3302. Check the vendor advisory for mitigations.

References

https://www.twcert.org.tw/en/cp-139-7931-608eb-2.html
https://www.twcert.org.tw/tw/cp-132-7930-e0368-1.html
https://www.twcert.org.tw/en/cp-139-7931-608eb-2.html
https://www.twcert.org.tw/tw/cp-132-7930-e0368-1.html

Get alerted when CVE-2024-6742 or the next vulnerability affects your stack