Description
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the web interface, allowing an attacker to inject and execute arbitrary JavaScript in the context of an authenticated user.
References (2)
Core 2
Core References
Various Sources product
https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch
Third Party Advisory third-party-advisory
https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-xss
Scores
CVSS v3
6.1
EPSS
0.0014
EPSS Percentile
3.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-79
Status
published
Products (1)
binardat/10g08-0800gsm_firmware
< V300SP10260209
Published
Feb 24, 2026
Tracked Since
Feb 24, 2026