Lucene search
HistoryApr 15, 2023 - 12:15 a.m.
CVE-2023-27572
cve-2023-27572
reflected xss
commscope arris
cable gateway
security vulnerability
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
40.8%
An issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. A reflected XSS vulnerability was discovered in the https_redirect.php web page via the page parameter.
Affected configurations
Node
commscopedg3450Match-
commscopedg3450_firmwareMatchar01.02.056.18_041520_711.ncs.10
| CPE | Name | Operator | Version |
|---|---|---|---|
| commscope:dg3450_firmware | commscope dg3450 firmware | eq | ar01.02.056.18_041520_711.ncs.10 |
References
Social References
More
Related
cvelist
cvelist
CVE-2023-27572
2023-04-14 00:00:00
prion
prion
Cross site scripting
2023-04-15 00:15:00
nvd
nvd
CVE-2023-27572
2023-04-15 00:15:07
zdt
zdt
packetstorm
packetstorm
Arris DG3450 AR01.02.056.18_041520_711.NCS.10 XSS / Missing Authentication
2023-03-07 00:00:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
40.8%
Related for CVE-2023-27572