CVE-2023-49260 Stored cross-site scripting vulnerability

2024-01-1214:25:17

CWE-79

CERT-PL

www.cve.org

xss

motd

terminal_tool

cve-2023-49260

vulnerability

cve-2023-49255

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

JSON

An XSS attack can be performed by changing the MOTD banner and pointing the victim to the “terminal_tool.cgi” path. It can be used together with the vulnerability CVE-2023-49255.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "H8951-4G-ESP",
    "vendor": "Hongdian",
    "versions": [
      {
        "lessThan": "2310271149",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]