PT-2017-13335 · Ee · Ee 4Gee Wifi Mbb

Published 2017-09-11 · Updated 2017-09-15 · CVE-2017-14268

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions EE 4GEE WiFi MBB versions before EE60 00 05.00 31

Description The issue concerns an XSS vulnerability in the sms content parameter of a "getSMSlist" request.

Recommendations For versions before EE60 00 05.00 31, update to version EE60 00 05.00 31 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-14268

Affected Products

Ee 4Gee Wifi Mbb

References · 4

• 🔥 http://seclists.org/fulldisclosure/2017/Sep/13 · Exploit
• 🔥 https://blog.jameshemmings.co.uk/2017/08/24/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeup · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-14268 · Security Note
• https://osv.dev/vulnerability/CVE-2017-14268 · Vendor Advisory