Lucene search
PRIOn knowledge basePRION:CVE-2017-5256HistoryDec 20, 2017 - 10:29 p.m.
Cross site scripting
2017-12-2022:29:00
PRIOn knowledge base
www.prio-n.com
1
In version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the ability to update the Device Name and System Description fields in the web administration console, and those fields are vulnerable to persistent cross-site scripting (XSS) injection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| epmp_1000_firmware | le | 3.5 | |
| epmp_2000_firmware | le | 3.5 |
Related
nvd
nvd
CVE-2017-5256
2017-12-20 22:29:00
cvelist
cvelist
CVE-2017-5256
2017-12-20 22:00:00
cve
cve
CVE-2017-5256
2017-12-20 22:29:00