CVE-2018-25035: fallo de gravedad baja en Thomson TCW710
Thomson TCW710 RGFirewallEL Persistent cross site scriting
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 3.5epss 0.6%
A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Productos afectados
Thomson · TCW710CVEs relacionadas — Thomson TCW710
En el mismo producto, de las más peligrosas a las menos.
CVE-2018-25034LOWThomson TCW710 wlanPrimaryNetwork Persistent cross site scriptingEPSS 0.7%CVE-2018-25038LOWThomson TCW710 RgDhcp Persistent cross site scritingEPSS 0.6%CVE-2018-25037LOWThomson TCW710 RgDdns Persistent cross site scritingEPSS 0.6%CVE-2018-25036LOWThomson TCW710 RgTime Persistent cross site scritingEPSS 0.6%CVE-2018-25039LOWThomson TCW710 RgUrlBlock.asp Persistent cross site scritingEPSS 0.5%