CVE-2022-23083

Опубликовано: 18 янв. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

NetMaster 12.2 Network Management for TCP/IP and NetMaster File Transfer Management contain a XSS (Cross-Site Scripting) vulnerability in ReportCenter UI due to insufficient input validation that could potentially allow an attacker to execute code on the affected machine.

Ссылки

https://support.broadcom.com/external/content/security-advisories/NetMaster-12.2-ReportCenter-Vulnerability-CVE-2022-23083/20049
Permissions Required
Vendor Advisory
https://support.broadcom.com/external/content/security-advisories/NetMaster-12.2-ReportCenter-Vulnerability-CVE-2022-23083/20049
Permissions Required
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:broadcom:netmaster_file_transfer_management:12.2:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:netmaster_network_management_for_tcp\/ip:12.2:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00724

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-2mgm-5g5q-v3cw

github

больше 4 лет назад