CVE-2014-10018

EPSS 1.8%

Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/31087unverified exploitdbwww.exploit-db.com/exploits/31087unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/102343 https://exchange.xforce.ibmcloud.com/vulnerabilities/90642 http://www.exploit-db.com/exploits/31087 http://www.securityfocus.com/bid/65056