Genexis · Genexis Tilgin Fiber Home Gateway Hg1522 · CVE-2024-6355
**Name of the Vulnerable Software and Affected Versions**
Genexis Tilgin Fiber Home Gateway HG1522 version CSx000-01 09 01 12
**Description**
A vulnerability was found in the Genexis Tilgin Fiber Home Gateway, affecting an unknown functionality of the file /status/product info/. The manipulation of the `product info` argument leads to cross-site scripting. The attack can be launched remotely. The vendor was contacted about this disclosure but did not respond.
**Recommendations**
For version CSx000-01 09 01 12, as a temporary workaround, consider restricting access to the /status/product info/ file until a patch is available. Avoid using the `product info` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.