Lucene search

[email protected]CVE-2018-5967

HistoryJan 25, 2018 - 8:29 a.m.

CVE-2018-5967

2018-01-2508:29:00

CWE-79

[email protected]

web.nvd.nist.gov

netis

wf2419

v2.2.36123

xss

bandwidth control rule settings

information security

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.6%

JSON

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page.

Affected configurations

NVD

Node

netis-systemswf2419_firmwareMatch2.2.36123

AND

netis-systemswf2419Match-

CPENameOperatorVersion
netis-systems:wf2419_firmwarenetis-systems wf2419 firmwareeq2.2.36123

CPE	Name	Operator	Version
netis-systems:wf2419_firmware	netis-systems wf2419 firmware	eq	2.2.36123

References

packetstormsecurity.com/files/145513/Netis-WF2419-HTML-Injection.html

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.6%

JSON

Related for CVE-2018-5967

nvd1 prion1 cvelist1