CVE-2017-15291

Опубликовано: 20 окт. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allows remote attackers to inject arbitrary web script or HTML via the Description field.

Ссылки

https://fireshellsecurity.team/assets/pdf/Router-TP-LINK-TL-MR3220-Vulnerability-XSS.pdf
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/43023/
Exploit
Third Party Advisory
VDB Entry
https://fireshellsecurity.team/assets/pdf/Router-TP-LINK-TL-MR3220-Vulnerability-XSS.pdf
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/43023/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tp-link:tl-mr3220_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-mr3220:-:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00536

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-6g2c-5x73-gvxh