exploitDog

CVE-2022-40846

Опубликовано: 15 нояб. 2022

Источник: nvd

CVSS3: 4.8

EPSS Низкий

Описание

In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) vulnerability exists allowing an attacker to execute JavaScript code via the applications stored hostname.

Ссылки

https://boschko.ca/tenda_ac1200_router/
Exploit
Technical Description
Third Party Advisory
https://boschko.ca/tenda_ac1200_router/
Exploit
Technical Description
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tenda:w15e_firmware:15.11.0.10\(1576\):*:*:*:*:*:*:*

cpe:2.3:h:tenda:w15e:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00302

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-899r-qc24-g3c5

CVSS3: 4.8

github

около 3 лет назад

In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) vulnerability exists allowing an attacker to execute JavaScript code via the applications stored hostname.

EPSS

Процентиль: 53%

0.00302

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

CWE-79