Lucene search

K
nvd[email protected]NVD:CVE-2022-47698
HistoryJan 31, 2023 - 6:15 p.m.

CVE-2022-47698

2023-01-3118:15:09
CWE-79
web.nvd.nist.gov
2
comfast
router
firmware
xss
vulnerability
url filtering

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

32.1%

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS) via the URL filtering feature in the router.

Affected configurations

Nvd
Node
comfast_projectcf-wr623n_firmwareMatch2.3.0.1
AND
comfast_projectcf-wr623nMatch-
VendorProductVersionCPE
comfast_projectcf-wr623n_firmware2.3.0.1cpe:2.3:o:comfast_project:cf-wr623n_firmware:2.3.0.1:*:*:*:*:*:*:*
comfast_projectcf-wr623n-cpe:2.3:h:comfast_project:cf-wr623n:-:*:*:*:*:*:*:*

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

32.1%

Related for NVD:CVE-2022-47698