PT-2010-4064 · Linksys · Linksys Wap54Gv3

Publicado 2010-06-28 · Atualizado 2018-10-10 · CVE-2010-2506

Positive Technologies (AI Summary)

CVSS v2.0

2.9

Baixa

Vetor base

AV:A/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linksys WAP54Gv3 firmware versions 3.04.03 through 3.05.03

Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the data1 parameter in the debug.cgi endpoint.

Recommendations For Linksys WAP54Gv3 firmware versions 3.04.03 and 3.05.03, avoid using the data1 parameter in the debug.cgi endpoint until a fix is available.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-2506

Produtos afetados

Linksys Wap54Gv3

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-2506 · Nota de Segurança
• http://securityfocus.com/archive/1/511952/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59699 · Nota