CVE-2017-2148

Опубликовано: 28 апр. 2017

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Ссылки

http://jvn.jp/en/jp/JVN01537659/index.html
Third Party Advisory
VDB Entry
http://www.iodata.jp/support/information/2017/wn-ac1167gr/
Vendor Advisory
http://www.securityfocus.com/bid/97714
Third Party Advisory
VDB Entry
http://jvn.jp/en/jp/JVN01537659/index.html
Third Party Advisory
VDB Entry
http://www.iodata.jp/support/information/2017/wn-ac1167gr/
Vendor Advisory
http://www.securityfocus.com/bid/97714
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:iodata:wn-ac1167gr_firmware:*:*:*:*:*:*:*:*

Версия до 1.04 (включая)

cpe:2.3:h:iodata:wn-ac1167gr:-:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.00235

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-r6r2-8j86-7344