Cross site scripting

2017-04-1003:59:00

PRIOn knowledge base

www.prio-n.com

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

21.7%

JSON

Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to deviceSettings.php or shareDevice.php.

References

community.rapid7.com/community/infosec/blog/2015/09/02/iotsec-disclosure-10-new-vulns-for-several-video-baby-monitors