CVE-2023-2384

🗓️ 28 Apr 2023 17:31:04Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 54 Views🌐 WEB

Vulnerability in Netgear SRX5308 up to 4.3.5-3 allowing remote cross site scripting via manipulation of dhcp.SecDnsIPByte2 argument in scgi-bin/platform.cgi?page=dmz_setup.ht

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.	10 May 202300:00	–	bdu_fstec
CNNVD	NETGEAR SRX5308 跨站脚本漏洞	28 Apr 202300:00	–	cnnvd
CNVD	NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43026)	6 May 202300:00	–	cnvd
Cvelist	CVE-2023-2384 Netgear SRX5308 Web Management Interface cross site scripting	28 Apr 202317:31	–	cvelist
EUVD	EUVD-2023-33874	3 Oct 202520:07	–	euvd
NVD	CVE-2023-2384	28 Apr 202318:15	–	nvd
OSV	CVE-2023-2384	28 Apr 202318:15	–	osv
Prion	Cross site scripting	28 Apr 202318:15	–	prion
Positive Technologies	PT-2023-2608 · NetGear · Netgear Srx5308	13 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-2384	23 May 202501:48	–	redhatcve

NVD

Vulners

Node

netgear srx5308_firmwareMatch4.3.5-3

AND

netgear srx5308Match-

[
  {
    "vendor": "Netgear",
    "product": "SRX5308",
    "versions": [
      {
        "version": "4.3.5-3",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Management Interface"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/leetsun/IoT/tree/main/Netgear-SRX5308/3

Parameter	Position	Path	Description	CWE
dhcp.SecDnsIPByte2	query param	scgi-bin/platform.cgi?page=dmz_setup.htm	Cross-site scripting vulnerability via dhcp.SecDnsIPByte2 in the dmz_setup.htm page parameter of the Web Management Interface.	CWE-79

17 Jun 2026 05:52Current

4.3Medium risk

Vulners AI Score4.3

CVSS 3.12.4 - 4.8

CVSS 23.3

CVSS 32.4

EPSS0.00649

CWE-79