Cross site scripting

2019-11-1315:15:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.6%

JSON

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName parameter to /FTPDiag.asp.

CPENameOperatorVersion
tc7300.b0_firmwareeq.51.20-stfa

CPE	Name	Operator	Version
	tc7300.b0_firmware	eq	.51.20-stfa

References

gitlab.com/luiss/cve_repo/blob/master/CVE-2019-17524/README.md

www.technicolor.com/news