Bridge Technologies VBC Server and Element Manager Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Bridge Technologies VBC Server and Element Manager, specifically in firmware versions 6.5.0-9 through 6.5.0-10. This vulnerability allows attackers to execute arbitrary code by exploiting the addName parameter in the /vbc/core/userSetupDoc/userSetupDoc endpoint.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, send a GET request to the /vbc/core/userSetupDoc/userSetupDoc endpoint. Include the addName parameter with a value that contains a script tag, such as '<script>alert(1);</script>'. Also include the other required parameters: UpdateFromDlg, addUsergroup, addStreamgroup, addAutologin, addStream, addStack, addShowNum, addShowIface, addPass, and submitflash.