This vulnerability affects the web-based management interface of Cisco Industrial Ethernet 1000 Series Switches, allowing an authenticated attacker to perform stored cross-site scripting (XSS) attacks. The root cause is insufficient input validation, enabling injection of malicious script code into specific pages of the interface. Successful exploitation could lead to arbitrary script execution in the context of other users, potentially compromising user sessions or data. The attacker must have valid credentials to exploit this issue. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges, and user interaction, with partial confidentiality and integrity impact but no availability impact.

An attacker with valid credentials can inject malicious scripts that execute in the context of other users accessing the management interface. This could lead to partial compromise of confidentiality and integrity, such as session hijacking or unauthorized actions performed on behalf of users. There is no impact on system availability. Since exploitation requires authentication, the risk is limited to users who have access to the device management interface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the management interface to trusted users only and consider additional monitoring of user activities. Avoid using accounts with unnecessary privileges for routine management tasks. Follow Cisco's official advisories for updates on patches or workarounds.