CVE-2017-16836

Опубликовано: 16 нояб. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajax_managed_services.php service parameter.

Ссылки

https://packetstormsecurity.com/files/134288/Arris-TG1682G-Modem-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/38657/
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/134288/Arris-TG1682G-Modem-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/38657/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:commscope:arris_tg1682g_firmware:10.0.59.sip.pc20.ct:*:*:*:*:*:*:*

cpe:2.3:h:commscope:arris_tg1682g:-:*:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.00279

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-wfv9-xvh7-763f