Lucene search
HistoryJan 12, 2024 - 3:15 p.m.
CVE-2023-49260
cve-2023-49260
xss attack
motd banner
terminal_tool.cgi
vulnerability
security
nvd
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
7.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.3%
An XSS attack can be performed by changing the MOTD banner and pointing the victim to the “terminal_tool.cgi” path. It can be used together with the vulnerability CVE-2023-49255.
Affected configurations
Node
hongdianh8951-4g-esp_firmwareRange<2310271149
hongdianh8951-4g-espMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| hongdian:h8951-4g-esp_firmware | hongdian h8951-4g-esp firmware | lt | 2310271149 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "H8951-4G-ESP",
"vendor": "Hongdian",
"versions": [
{
"lessThan": "2310271149",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
cvelist
cvelist
CVE-2023-49260 Stored cross-site scripting vulnerability
2024-01-12 14:25:17
CVE-2023-49255 Router console accessible without authentication
2024-01-12 14:23:53
nvd
nvd
CVE-2023-49260
2024-01-12 15:15:09
CVE-2023-49255
2024-01-12 15:15:09
prion
prion
Path traversal
2024-01-12 15:15:00
Default credentials
2024-01-12 15:15:00
cve
cve
CVE-2023-49255
2024-01-12 15:15:09
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
7.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.3%
Related for CVE-2023-49260