Lucene search
China National Vulnerability DatabaseCNVD-2023-43020HistoryMay 06, 2023 - 12:00 a.m.
NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43020)
2023-05-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
netgear
srx5308
vpn
firewall
xss
vulnerability
cross-site scripting
manipulation
parameter
ntp.server1
sensitive information
attacker
cookies
cnvd-2023-43020
EPSS
0.001
Percentile
40.8%
The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from incorrect manipulation of the parameter ntp.server1. The vulnerability can be exploited by an attacker to obtain sensitive information such as user cookies.
Related
prion
prion
Cross site scripting
2023-04-28 20:15:00
nvd
nvd
CVE-2023-2390
2023-04-28 20:15:14
cve
cve
CVE-2023-2390
2023-04-28 20:15:14
cvelist
cvelist
CVE-2023-2390 Netgear SRX5308 Web Management Interface cross site scripting
2023-04-28 20:00:07