Lucene search

VulDBCVELIST:CVE-2018-25035

HistoryJun 12, 2022 - 7:40 a.m.

CVE-2018-25035 Thomson TCW710 RGFirewallEL Persistent cross site scriting

2022-06-1207:40:21

CWE-80

VulDB

www.cve.org

3.5 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

0.001 Low

EPSS

Percentile

31.5%

JSON

A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CNA Affected

[
  {
    "product": "TCW710",
    "vendor": "Thomson",
    "versions": [
      {
        "status": "affected",
        "version": "ST5D.10.05"
      }
    ]
  }
]

References

alquimistadesistemas.com/auditando-router-thomson-tcw710

vuldb.com/?id.126696

3.5 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for CVELIST:CVE-2018-25035