CVE-2023-51737: falha de média gravidade em Hathway Skyworth Router CM5100
Stored Cross Site Scripting Vulnerability in Skyworth Router
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Preshared Phrase parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of the vulnerable targeted system.
Successful exploitation of this vulnerability could allow the attacker to perform stored XSS attacks on the targeted system.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N
Produtos afetados
Hathway · Skyworth Router CM5100CVEs relacionadas — Hathway Skyworth Router CM5100
No mesmo produto, das mais perigosas para as menos.
CVE-2023-51743MEDIUMBuffer Overflow vulnerability in Skyworth RouterEPSS 0.6%CVE-2023-51742MEDIUMBuffer Overflow vulnerability in Skyworth RouterEPSS 0.6%CVE-2023-51741HIGHCleartext Submission of Password vulnerability in Skyworth RouterEPSS 0.4%CVE-2023-51740HIGHCleartext Submission of Password vulnerability in Skyworth RouterEPSS 0.4%CVE-2023-51739MEDIUMStored Cross Site Scripting Vulnerability in Skyworth RouterEPSS 0.4%CVE-2023-51738MEDIUMStored Cross Site Scripting Vulnerability in Skyworth RouterEPSS 0.4%