XSS in Elvaco M-Bus Metering Gateway Cme3100

CVE-2024-49397

The affected product is vulnerable to a cross-site scripting attack which may allow an attacker to bypass authentication and takeover admin accounts.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.