The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS) which may allow an attacker to trick application users into performing critical application actions that include but are not limited to adding and updating accounts.