PT-2024-10909 · Sercomm · Sercomm

Published 2024-11-12 · Updated 2024-11-16 · CVE-2021-27703

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sercomm Model Etisalat Model S3- AC2100 (affected versions not specified)

Description The issue is related to Cross Site Scripting (XSS) via the firmware update page. This high-severity vulnerability impacts specific versions of Sercomm products, allowing potential exploitation. Users are urged to update to the latest firmware and apply recommended patches to mitigate risks.

Recommendations Update to the latest firmware to mitigate risks. As a temporary workaround, consider restricting access to the firmware update page until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-27703

Affected Products

Sercomm

References · 7

• 🔥 https://github.com/Mrnmap/mrnmap-cve/blob/main/CVE-2021-27703 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-27703 · Security Note
• https://t.me/cvedetector/10762 · Telegram Post
• https://twitter.com/transilienceai/status/1857654525420605883 · Twitter Post
• https://twitter.com/transilienceai/status/1857654532819337460 · Twitter Post
• https://twitter.com/CVEnew/status/1856828069304307833 · Twitter Post
• https://t.me/cvenotify/101452 · Telegram Post