Lucene search
HistoryDec 13, 2022 - 6:15 p.m.
CVE-2022-45028
arris nvg443b
cross-site scripting
arbitrary web scripts
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
30.5%
A cross-site scripting (XSS) vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha.
Affected configurations
Node
arrisnvg443b_firmwareMatch9.3.0h3d36
arrisnvg443bMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| arris | nvg443b_firmware | 9.3.0h3d36 | cpe:2.3:o:arris:nvg443b_firmware:9.3.0h3d36:*:*:*:*:*:*:* |
| arris | nvg443b | - | cpe:2.3:h:arris:nvg443b:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-45028
2022-12-13 18:15:10
prion
prion
Cross site scripting
2022-12-13 18:15:00
cvelist
cvelist
CVE-2022-45028
2022-12-13 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
30.5%
Related for NVD:CVE-2022-45028