PT-2017-12146 · Netcomm Wireless · Netcomm Wireless 4Gt101W

Publicado 2017-07-28 · Atualizado 2017-08-04 · CVE-2017-11647

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NetComm Wireless 4GT101W version V1.1.8.8

Description The issue allows for stored cross-site scripting attacks. By creating an SSID with an XSS payload, an attacker can successfully exploit this issue.

Recommendations For version V1.1.8.8, avoid using SSID names that could contain XSS payloads until a fix is available. As a temporary workaround, consider restricting access to the SSID configuration interface to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-11647

Produtos afetados

Netcomm Wireless 4Gt101W

Referências · 3

• 🔥 https://iscouncil.blogspot.com/2017/07/cross-site-scripting-vulnerability-in.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-11647 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-11647 · Aviso do Fabricante