PT-2017-13459 · D Link · D-Link Dir-850L
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1
Description
The issue concerns a problem where an attacker can execute malicious scripts. This is possible due to the presence of a cross-site scripting (XSS) flaw in the
action parameter of the "htdocs/web/sitesurvey.php" endpoint.Recommendations
For D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1, as a temporary workaround, consider restricting access to the
htdocs/web/sitesurvey.php endpoint until a patch is available. Avoid using the action parameter in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
D-Link Dir-850L