CVE-2024-45385 MEDIUM

CVE-2024-45385

Vendor Siemens

Product Industrial Edge Management OS (IEM-OS)

Weakness CWE-79 · XSS

Published January 14, 2025

Last update January 14, 2025

View on NVD All CVEs

CVSS base score

4.7/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:U/RC:C

What the vulnerability does

01Description

A vulnerability has been identified in Industrial Edge Management OS (IEM-OS) (All versions). Affected components are vulnerable to reflected cross-site scripting (XSS) attacks. This could allow an attacker to extract sensitive information by tricking users into accessing a malicious link.

Key dates

02Disclosure timeline

January 14, 2025 CVE published

January 14, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-45385 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2026-57329 WordPress WooCommerce Designer Pro plugin <= 1.9.34 - Cross Site Scripting (XSS) vulnerability CVE-2025-62365 LibreNMS vulnerable to Reflected-XSS in `report_this` function CVE-2024-8276 WPZOOM Portfolio Lite – Filterable Portfolio Plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute CVE-2024-7269 Stored XSS in ConnX ESP HR Management CVE-2023-2317 Typora DOM-Based Cross-site Scripting leading to Remote Code Execution