This vulnerability is a reflected XSS in the /logo.asp component of FS Inc S3150-8T2F Switch 2.2.0D Build 118101. An attacker can craft a URL that causes arbitrary JavaScript execution in the victim's browser, potentially leading to information disclosure or session hijacking. The vulnerability affects a cloud-hosted service, and no known exploits are reported in the wild. The CVSS vector indicates the attack is network-based, requires no privileges, user interaction is required, and the scope is changed with low impact on confidentiality and integrity, and no impact on availability.

Successful exploitation allows execution of arbitrary JavaScript in the context of the victim's browser, which can lead to limited confidentiality and integrity impacts such as theft of session tokens or manipulation of web page content. There is no impact on system availability. The vulnerability is medium severity based on CVSS 3.1 scoring.

Since this is a cloud service, the vendor manages remediation server-side. A patch is available, so users should verify with the vendor that the service has been updated. No additional user action is required if the vendor has applied the patch.