PT-2017-12146 · Netcomm Wireless · Netcomm Wireless 4Gt101W

Published 2017-07-28 · Updated 2017-08-04 · CVE-2017-11647

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NetComm Wireless 4GT101W version V1.1.8.8

Description The issue allows for stored cross-site scripting attacks. By creating an SSID with an XSS payload, an attacker can successfully exploit this issue.

Recommendations For version V1.1.8.8, avoid using SSID names that could contain XSS payloads until a fix is available. As a temporary workaround, consider restricting access to the SSID configuration interface to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-11647

Affected Products

Netcomm Wireless 4Gt101W

References · 3

• 🔥 https://iscouncil.blogspot.com/2017/07/cross-site-scripting-vulnerability-in.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-11647 · Security Note
• https://osv.dev/vulnerability/CVE-2017-11647 · Vendor Advisory