Design/Logic Flaw

2019-10-1618:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

D-Link DIR-866L 1.03B04 devices allow XSS via HtmlResponseMessage in the device common gateway interface, leading to common injection.

CPENameOperatorVersion
dir-866l_firmwareeq1.3.0-b4

CPE	Name	Operator	Version
	dir-866l_firmware	eq	1.3.0-b4

References

fortiguard.com/zeroday/FG-VD-19-116