as part of ","datePublished":"2022-06-12T07:40:25+00:00","dateModified":"2025-04-15T14:26:13.292000+00:00","inLanguage":"en","author":{"@type":"Organization","name":"Vexday"},"publisher":{"@type":"Organization","name":"Vexday","url":"https://vexday.io"},"mainEntityOfPage":"https://vexday.io/en/cve/CVE-2018-25038","keywords":"CVE-2018-25038, CWE-80","breadcrumb":{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://vexday.io/en"},{"@type":"ListItem","position":2,"name":"CVE-2018-25038"}]}}← back

CVE-2018-25038lowCWE-80

Thomson TCW710 RgDhcp Persistent cross site scriting

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.5epss 0.6%

exploitation probability

0.6%top 53% of all CVEs

observed exploitation

nono source reports it

A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The manipulation of the argument PppUserName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Affected products

Thomson · TCW710

References

https://alquimistadesistemas.com/auditando-router-thomson-tcw710https://vuldb.com/?id.126699