CVE-2026-6998mediumCWE-79CWE-94

CVE-2026-6998: falha de média gravidade em BDCOM P3310D

BDCOM P3310D New RMON Statistics cross site scripting

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar P3310D

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.8epss 0.2%
A vulnerability was detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. Affected is an unknown function of the component New RMON Statistics Page. The manipulation of the argument Owner results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
BDCOM · P3310D
CVEs relacionadas — BDCOM P3310D

No mesmo produto, das mais perigosas para as menos.

CVE-2026-6997MEDIUMBDCOM P3310D New RMON History cross site scriptingEPSS 0.2%CVE-2026-6996MEDIUMBDCOM P3310D rmon event Tab cross site scriptingEPSS 0.2%CVE-2026-6995MEDIUMBDCOM P3310D New User index.asp cross site scriptingEPSS 0.2%