Cross site scripting

2014-11-0615:55:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

84.9%

JSON

Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie.

CPENameOperatorVersion
cg6640e_wireless_gatewayeq1.0
ch664oe_wireless_gatewayeq1.0
firmwareeqch66403.5.11.7nosh

Name	Operator	Version
cg6640e_wireless_gateway	eq	1.0
ch664oe_wireless_gateway	eq	1.0
firmware	eq	ch66403.5.11.7nosh

References

osvdb.org/show/osvdb/113839

packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html

www.securityfocus.com/bid/70762

www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5203.php

exchange.xforce.ibmcloud.com/vulnerabilities/98328

www.exploit-db.com/exploits/35075