Lucene search
CVE-2021-25326
🗓️ 09 Apr 2021 13:13:15Reported by mitreType 
cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 53 Views🌐 WEB
Skyworth Digital RN510 V.3.1.0.4 access control vulnerability in test_version.as
Show more
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2021-25326 | 9 Apr 202112:19 | – | cvelist |
 | Skyworth Digital Technology RN510 Access Control Error Vulnerability | 12 Apr 202100:00 | – | cnvd |
 | Shenzhen Skyworth RN510 Information Disclosure | 4 May 202100:00 | – | packetstorm |
 | Improper access control | 9 Apr 202113:15 | – | prion |
 | CVE-2021-25326 | 9 Apr 202113:15 | – | nvd |
 | Shenzhen Skyworth RN510 Information Disclosure Vulnerability | 2 May 202100:00 | – | zdt |
Node
| Source | Link |
|---|---|
| s3curityb3ast | www.s3curityb3ast.github.io/KSA-Dev-013.md |
| packetstormsecurity | www.packetstormsecurity.com/files/162455/Shenzhen-Skyworth-RN510-Information-Disclosure.html |
| seclists | www.seclists.org/fulldisclosure/2021/May/8 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| DestIPAddress | query param | /cgi-bin/net-routeadd.asp | XSS vulnerability that requires authenticated access to run malicious payload. | CWE-79 |
| urlitem | query param | /cgi-bin/net-routeadd.asp | XSS vulnerability that requires authenticated access to run malicious payload. | CWE-79 |
| DestIPAddress | query param | /cgi-bin/sec-urlfilter.asp | XSS vulnerability that requires authenticated access to run malicious payload. | CWE-79 |
| urlitem | query param | /cgi-bin/sec-urlfilter.asp | XSS vulnerability that requires authenticated access to run malicious payload. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo09 Apr 2021 13:15Current
5.6Medium risk
Vulners AI Score5.6
CVSS23.5
CVSS35.4
EPSS0.00288