PT-2026-35173 · Bdcom · P3310D

Havook · Published 2026-04-25 · Updated 2026-04-25 · CVE-2026-6998

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BDCOM P3310D version 0.4.2 10.1.0F Build 86345

Description An issue exists in the New RMON Statistics Page component where the manipulation of the Owner argument allows for remote cross-site scripting (XSS), a technique where malicious scripts are injected into trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-6998

Affected Products

P3310D

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-6998 · Security Note
• https://twitter.com/VulmonFeeds/status/2048156408177205411 · Twitter Post
• https://twitter.com/CVEnew/status/2048168326883651796 · Twitter Post
• https://vuldb.com/vuln/359557/cti · Note
• https://vuldb.com/vuln/359557 · Note
• https://vuldb.com/submit/797249 · Note