CVE-2024-44573

MediumCVSS 4.7

Published: 11/09/2024(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe versions v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Risk Assessment

The risk involves potential session hijacking, data theft, or unauthorized actions within the application context, leading to confidentiality and integrity breaches.

Recommendation

Immediately update RELY-PCIe to a version later than v23.1.0 and implement input sanitization in VLAN configuration.

Original NVD description (English source)

A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.