CVE-2018-15181

Опубликовано: 09 авг. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 6.8

EPSS Низкий

Описание

JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure configuration outage) via an XSS payload in the SSID name and Security Key fields.

Ссылки

https://gkaim.com/cve-2018-15181-vikas-chaudhary/
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/45199/
Exploit
Third Party Advisory
VDB Entry
https://gkaim.com/cve-2018-15181-vikas-chaudhary/
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/45199/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:jio:4g_hotspot_m2s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:jio:4g_hotspot_m2s:-:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00792

Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-86p3-4785-rm9c