Lucene search

K
nvd[email protected]NVD:CVE-2024-32327
HistoryApr 18, 2024 - 5:15 p.m.

CVE-2024-32327

2024-04-1817:15:48
CWE-79
web.nvd.nist.gov
totolink n300rt v2.1.8-b20201030.1539
xss vulnerability
port forwarding
firewall page

CVSS3

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

5.8

Confidence

High

EPSS

0

Percentile

9.0%

TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in Port Forwarding under the Firewall Page.

CVSS3

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

5.8

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-32327