CVE-2016-7808

Опубликовано: 09 июн. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Ссылки

http://corega.jp/support/security/20161111_wlbargmh_wlbargnl.htm
Vendor Advisory
http://www.securityfocus.com/bid/94249
Third Party Advisory
VDB Entry
https://jvn.jp/en/jp/JVN25060672/index.html
Third Party Advisory
VDB Entry
http://corega.jp/support/security/20161111_wlbargmh_wlbargnl.htm
Vendor Advisory
http://www.securityfocus.com/bid/94249
Third Party Advisory
VDB Entry
https://jvn.jp/en/jp/JVN25060672/index.html
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:corega:cg-wlbaragm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:corega:cg-wlbargmh:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:corega:cg-wlbargnl_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:corega:cg-wlbargnl:-:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00324

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-227c-4fg6-p522