Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
横河電機のSCADAに脆弱性(CVE-2024-41914)が発覚。重要情報を平文で送信。この件を掘り下げた記事あり。 https://ai-news-daily-20260221.web.app/article/post_1782730834147_2cavo0
Post summary
The text announces the discovery of CVE‑2024‑41914 in Yokogawa Electric SCADA, noting that privileged data is transmitted unencrypted, but does not provide PoC, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | arubanetworks | edgeconnect_sd-wan_orchestrator | - | - | - |