PT-2024-37561 · Genexis · Genexis Tilgin Fiber Home Gateway Hg1522

The_Druk · Published 2024-06-26 · Updated 2024-06-27 · CVE-2024-6355

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Genexis Tilgin Fiber Home Gateway HG1522 version CSx000-01 09 01 12

Description A vulnerability was found in the Genexis Tilgin Fiber Home Gateway, affecting an unknown functionality of the file /status/product info/. The manipulation of the product info argument leads to cross-site scripting. The attack can be launched remotely. The vendor was contacted about this disclosure but did not respond.

Recommendations For version CSx000-01 09 01 12, as a temporary workaround, consider restricting access to the /status/product info/ file until a patch is available. Avoid using the product info argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-6355

Affected Products

Genexis Tilgin Fiber Home Gateway Hg1522

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-6355 · Security Note
• https://vuldb.com/?ctiid.269755 · Note
• https://vuldb.com/?id.269755 · Note
• https://t.me/cvenotify/84582 · Telegram Post
• https://vuldb.com/?submit.359289 · Note