CVE-2023-51722mediumCWE-79

CVE-2023-51722: fallo de gravedad media en Hathway Skyworth Router CM5100

Stored Cross Site Scripting Vulnerability in Skyworth Router

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Skyworth Router CM5100

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.9epss 0.4%
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 3 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of the vulnerable targeted system. Successful exploitation of this vulnerability could allow the attacker to perform stored XSS attacks on the targeted system.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N
Productos afectados
Hathway · Skyworth Router CM5100
CVEs relacionadas — Hathway Skyworth Router CM5100

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-51743MEDIUMBuffer Overflow vulnerability in Skyworth RouterEPSS 0.6%CVE-2023-51742MEDIUMBuffer Overflow vulnerability in Skyworth RouterEPSS 0.6%CVE-2023-51741HIGHCleartext Submission of Password vulnerability in Skyworth RouterEPSS 0.4%CVE-2023-51740HIGHCleartext Submission of Password vulnerability in Skyworth RouterEPSS 0.4%CVE-2023-51739MEDIUMStored Cross Site Scripting Vulnerability in Skyworth RouterEPSS 0.4%CVE-2023-51738MEDIUMStored Cross Site Scripting Vulnerability in Skyworth RouterEPSS 0.4%