CVE-2023-49260

Опубликовано: 12 янв. 2024

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It can be used together with the vulnerability CVE-2023-49255.

Ссылки

https://cert.pl/en/posts/2024/01/CVE-2023-49253/
Third Party Advisory
https://cert.pl/posts/2024/01/CVE-2023-49253/
Third Party Advisory
https://cert.pl/en/posts/2024/01/CVE-2023-49253/
Third Party Advisory
https://cert.pl/posts/2024/01/CVE-2023-49253/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:hongdian:h8951-4g-esp_firmware:*:*:*:*:*:*:*:*

Версия до 2310271149 (исключая)

cpe:2.3:h:hongdian:h8951-4g-esp:-:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00076

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-v64q-49fj-whh5