CVE-2023-2391

🗓️ 28 Apr 2023 20:31:04Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 39 Views🌐 WEB

Vulnerability in Netgear SRX5308 up to 4.3.5-3, allowing remote cross site scripting via manipulation of ntp.server2 argument in Web Management Interface

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-2391	29 Apr 202300:27	–	circl
CNNVD	NETGEAR SRX5308 跨站脚本漏洞	28 Apr 202300:00	–	cnnvd
CNVD	NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43021)	6 May 202300:00	–	cnvd
Cvelist	CVE-2023-2391 Netgear SRX5308 Web Management Interface cross site scripting	28 Apr 202320:31	–	cvelist
EUVD	EUVD-2023-33881	3 Oct 202520:07	–	euvd
NVD	CVE-2023-2391	28 Apr 202321:15	–	nvd
OSV	CVE-2023-2391	28 Apr 202321:15	–	osv
Prion	Cross site scripting	28 Apr 202321:15	–	prion
Positive Technologies	PT-2023-2601 · NetGear · Netgear Srx5308	13 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-2391	23 May 202501:51	–	redhatcve

NVD

Vulners

Node

netgear srx5308_firmwareMatch4.3.5-3

AND

netgear srx5308Match-

[
  {
    "vendor": "Netgear",
    "product": "SRX5308",
    "versions": [
      {
        "version": "4.3.5-3",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Management Interface"
    ]
  }
]

Source	Link
github	www.github.com/leetsun/IoT/tree/main/Netgear-SRX5308/11
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
ntp.server2	query param	scgi-bin/platform.cgi	Cross-site scripting vulnerability via manipulation of ntp.server2 parameter in the platform.cgi page (time_zone.htm) of Netgear SRX5308 Web Management Interface.	CWE-79

21 Nov 2024 07:58Current

4.2Medium risk

Vulners AI Score4.2

CVSS 3.12.4 - 4.8

CVSS 23.3

CVSS 32.4

EPSS0.00369

CWE-79