PT-2023-2163 · Cisco · Cisco Small Business Rv325+5
Leetsun
·
Publicado
2023-04-05
·
Atualizado
2023-04-12
·
CVE-2023-20149
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 (affected versions not specified)
Description
The issue is related to insufficient protection of the web page structure and insufficient input validation by the web-based management interface, allowing an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks. This can be achieved by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cisco Small Business Rv016
Cisco Small Business Rv042
Cisco Small Business Rv042G
Cisco Small Business Rv082
Cisco Small Business Rv320
Cisco Small Business Rv325