Описание
Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their own script into the page via DDNS Configuration Section.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:skyworth:gn542vf_firmware:2.0.0.16:*:*:*:*:*:*:*
cpe:2.3:h:skyworth:gn542vf:2.0:*:*:*:*:*:*:*
EPSS
Процентиль: 69%
0.00602
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
больше 3 лет назад
Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their own script into the page via DDNS Configuration Section.
EPSS
Процентиль: 69%
0.00602
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79