CVE-2026-52232 in S3150-8T2F Switch
Summary
by MITRE • 08/01/2026
A reflected cross-site scripting (XSS) vulnerability in the /logo.asp component of FS Inc S3150-8T2F Switch 2.2.0D Build 118101 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 08/01/2026
This reflected cross-site scripting vulnerability exists within the FS Inc S3150-8T2F Switch firmware version 2.2.0D Build 118101, specifically in the /logo.asp component that handles logo display functionality. The flaw represents a classic XSS vector where malicious input is reflected back to users without proper sanitization or encoding, creating an opportunity for attackers to inject and execute arbitrary JavaScript code within victim browsers. This vulnerability falls under CWE-79 which categorizes cross-site scripting flaws as weaknesses in web applications that allow attacker-controlled data to be executed as client-side scripts.
The attack scenario involves an attacker crafting a malicious URL containing crafted script payloads that get reflected through the vulnerable /logo.asp endpoint when accessed by unsuspecting users. When victims navigate to these specially constructed URLs, their browsers execute the injected JavaScript code within the context of the legitimate switch management interface, potentially enabling session hijacking, credential theft, or further exploitation of the network device. The reflected nature of this vulnerability means that the malicious payload is not stored on the server but rather passed through the application and immediately reflected back to the user.
The operational impact of this vulnerability extends beyond simple script execution as it can enable sophisticated attacks such as credential harvesting through form data capture, session manipulation that allows unauthorized administrative access, or even the delivery of additional malware payloads. Network administrators who are logged into the switch management interface become immediate targets for this attack vector, creating potential compromise of network infrastructure control surfaces. The vulnerability particularly affects organizations using this specific switch model where attackers could leverage the reflected XSS to gain persistent access to critical network devices, potentially leading to complete network compromise and unauthorized data exfiltration.
Mitigation strategies should focus on input validation and output encoding within the /logo.asp component to prevent malicious script execution. Implementing proper Content Security Policy headers can provide additional protection against script injection attacks, while regular firmware updates from FS Inc would address this specific vulnerability. Network segmentation and monitoring for unusual traffic patterns could help detect exploitation attempts, though these measures are reactive rather than preventive. The ATT&CK framework categorizes this vulnerability under T1566 for social engineering techniques that leverage web-based exploits, making it particularly relevant for organizations implementing security awareness training to prevent users from clicking malicious links. Organizations should also consider implementing web application firewalls to detect and block known XSS attack patterns targeting network management interfaces.