CVE-2023-2385

🗓️ 28 Apr 2023 18:00:05Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

Vulnerability in Netgear SRX5308 up to 4.3.5-3, leading to cross site scripting via manipulation of IpsecIKEPolicy.IKEPolicyName argument

Reporter	Title	Published	Views	Family All 9
CNNVD	NETGEAR SRX5308 跨站脚本漏洞	28 Apr 202300:00	–	cnnvd
CNVD	NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43027)	6 May 202300:00	–	cnvd
Cvelist	CVE-2023-2385 Netgear SRX5308 Web Management Interface cross site scripting	28 Apr 202318:00	–	cvelist
EUVD	EUVD-2023-33875	3 Oct 202520:07	–	euvd
NVD	CVE-2023-2385	28 Apr 202318:15	–	nvd
OSV	CVE-2023-2385	28 Apr 202318:15	–	osv
Prion	Cross site scripting	28 Apr 202318:15	–	prion
Positive Technologies	PT-2023-2607 · NetGear · Netgear Srx5308	13 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-2385	23 May 202503:19	–	redhatcve

NVD

Vulners

Node

netgear srx5308_firmwareMatch4.3.5-3

AND

netgear srx5308Match-

[
  {
    "vendor": "Netgear",
    "product": "SRX5308",
    "versions": [
      {
        "version": "4.3.5-3",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Management Interface"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/leetsun/IoT/tree/main/Netgear-SRX5308/5
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
IpsecIKEPolicy.IKEPolicyName	query param	scgi-bin/platform.cgi	Cross-site scripting in Netgear SRX5308 Web Management Interface via IpsecIKEPolicy.IKEPolicyName on page ike_policies.htm (scgi-bin/platform.cgi?page=ike_policies.htm). CWE-79.	CWE-79

21 Nov 2024 07:58Current

4.2Medium risk

Vulners AI Score4.2

CVSS 3.12.4 - 4.8

CVSS 23.3

CVSS 32.4

EPSS0.00369

CWE-79