A stored cross-site scripting vulnerability in the Genexis Platinum-4410 firmware allows authenticated attackers to execute arbitrary scripts in the context of other privileged users.

This is a stored cross-site scripting (CWE-79) vulnerability located in the start_addr parameter of the Security Management interface. An authenticated attacker can inject malicious JavaScript that will execute whenever a privileged user accesses the affected security management page.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code within the browser session of an administrative user. This can lead to unauthorized configuration changes, session hijacking, or the theft of sensitive administrative credentials. Given the CVSS score of 7.2, this represents a high-severity risk that could compromise the integrity and security of the device management interface.

Immediate Action: Consult the official Genexis support portal to determine if a firmware update is available for your specific unit to resolve this cross-site scripting flaw.

Proactive Monitoring: Review web access logs for the security management interface to detect unusual request patterns or attempts to inject script-like characters into input fields.

Compensating Controls: If a patch is unavailable, restrict access to the device management interface to trusted internal IP addresses only, and educate administrative users on the risks of clicking suspicious links or interacting with untrusted management console content.

Public Exploit Available: Yes — a published proof-of-concept exists as documented in the ExploitDB entry 49709.

This vulnerability presents a significant risk to the administrative integrity of the Genexis Platinum-4410 series. Security teams should prioritize identifying affected firmware versions and applying vendor-supplied patches as soon as they are made available to prevent potential account takeovers or unauthorized administrative actions.