CVE-2014-1612

2014-01-3018:55:03

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-1612

xss

cross-site scripting

media5 mediatrix 4402

voip gateway

security vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

70.3%

JSON

Cross-site scripting (XSS) vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.

Affected configurations

NVD

Node

media5mediatrix_voip_gateway_4402_firmwareMatchdgw_1.1.13.186

AND

media5mediatrix_voip_gatewayMatch4402

VendorProductVersionCPE
media5mediatrix_voip_gateway_4402_firmwaredgw+1.1.13.186cpe:/a:media5:mediatrix_voip_gateway_4402_firmware:dgw+1.1.13.186:::
media5mediatrix_voip_gateway4402cpe:/h:media5:mediatrix_voip_gateway:4402:::

Vendor	Product	Version	CPE
media5	mediatrix_voip_gateway_4402_firmware	dgw+1.1.13.186	cpe:/a:media5:mediatrix_voip_gateway_4402_firmware:dgw+1.1.13.186:::
media5	mediatrix_voip_gateway	4402	cpe:/h:media5:mediatrix_voip_gateway:4402:::