Security readout for executives and security teams
Plain-English summary
CVE-2022-24654 is an authenticated stored XSS issue in Intelbras ATA 200 firmware 74.19.10.21. An attacker with access to the device interface could save JavaScript in the Field Server Address field, potentially affecting later users who view that stored setting.
Executive priority
Treat as a targeted device-management risk rather than an internet-scale emergency, unless affected devices are broadly reachable or share administrative access across teams.
Technical view
The CVE describes stored JavaScript injection through the Field Server Address field in Intelbras ATA 200 firmware 74.19.10.21. The available bundle does not provide CVSS, CWE, patch status, or evidence of unauthenticated access. KEV is false.
Likely exposure
Exposure is most likely where Intelbras ATA 200 devices running firmware 74.19.10.21 are managed by multiple users or reachable from untrusted networks. The attacker appears to need authenticated access.
Exploitation context
Public references exist, including Packet Storm and GitHub entries. The source bundle does not indicate active exploitation, KEV listing, public CVSS scoring, or a confirmed vendor fix.
Researcher notes
The evidence is narrow: one affected firmware version, authenticated stored XSS, and public references. Missing data includes CVSS, CWE, patch status, vendor advisory details, and broader affected-version confirmation.
Mitigation direction
- Check Intelbras support or advisories for firmware updates or official mitigation guidance.
- Restrict device management access to trusted administrator networks or VPNs.
- Limit device administrative accounts to necessary users only.
- Review saved configuration fields for unexpected script-like content.
- Avoid exposing the management interface to the public internet.
Validation and detection
- Inventory Intelbras ATA 200 devices and confirm firmware versions.
- Identify any devices running firmware 74.19.10.21.
- Review the Field Server Address value for unexpected content.
- Confirm management access is restricted to trusted administrators.
- Check available vendor guidance for this specific CVE.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2022-24654 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://packetstormsecurity.com/files/168064/Intelbras-ATA-200-Cross-Site-Scripting.htmlCVE reference, mitre
- https://github.com/leonardobg/CVE-2022-24654CVE reference, mitre
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.