Lucene search

[email protected]CVE-2017-11647

HistoryJul 28, 2017 - 5:29 a.m.

CVE-2017-11647

2017-07-2805:29:00

CWE-79

[email protected]

web.nvd.nist.gov

netcomm

wireless

4gt101w

routers

cve-2017-11647

vulnerability

xss

nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

23.6%

JSON

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation.

Affected configurations

NVD

Node

netcomm4gt101w_softwareMatch1.1.8.8

AND

netcomm4gt101w_bootloaderMatch1.1.3

CPENameOperatorVersion
netcomm:4gt101w_softwarenetcomm 4gt101w softwareeq1.1.8.8
netcomm:4gt101w_bootloadernetcomm 4gt101w bootloadereq1.1.3

CPE	Name	Operator	Version
netcomm:4gt101w_software	netcomm 4gt101w software	eq	1.1.8.8
netcomm:4gt101w_bootloader	netcomm 4gt101w bootloader	eq	1.1.3

References

iscouncil.blogspot.com/2017/07/cross-site-scripting-vulnerability-in.html

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

23.6%

JSON

Related for CVE-2017-11647

prion1 nvd1 cvelist1