CVE-2014-4871

2014-10-0710:55:04

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-4871

cross-site scripting

xss

wlsecurity.html

netcommwireless

nb604n routers

firmware vulnerability

gan5.cz56t-b-nc.au-r4b030.en

wlwpapsk parameter

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.1%

JSON

Cross-site scripting (XSS) vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote attackers to inject arbitrary web script or HTML via the wlWpaPsk parameter.

Affected configurations

NVD

Node

netcommwirelessnb604n_firmwareRange≤gan5.cz56t-b-nc.au-r4b010.en

AND

netcommwirelessnb604nMatch-

CPENameOperatorVersion
netcommwireless:nb604n_firmwarenetcommwireless nb604n firmwarelegan5.cz56t-b-nc.au-r4b010.en
netcommwireless:nb604nnetcommwireless nb604neq-