Описание
In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in Parental Control --> Access Time Restriction --> Username field, a user cannot delete the rule due to the XSS.
Ссылки
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:fiberhome:hg150-ub_firmware:3.0:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:hg150-ub:-:*:*:*:*:*:*:*
EPSS
Процентиль: 78%
0.01115
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 5.4
github
больше 3 лет назад
In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in Parental Control --> Access Time Restriction --> Username field, a user cannot delete the rule due to the XSS.
EPSS
Процентиль: 78%
0.01115
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79