Cross site scripting

2021-10-2015:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

31.7%

JSON

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.

CPENameOperatorVersion
mf971r_firmwareeq1.0.0b5-v
mf971r_firmwareeq1.0.0-v1.0.0-b6
mf971r_firmwareeq2.0.0-v1.0.0-b3
mf971r_firmwareeq2v1.0.0b3-s
mf971r_firmwareeq1.0.0b5-sv

Name	Operator	Version
mf971r_firmware	eq	1.0.0b5-v
mf971r_firmware	eq	1.0.0-v1.0.0-b6
mf971r_firmware	eq	2.0.0-v1.0.0-b3
mf971r_firmware	eq	2v1.0.0b3-s
mf971r_firmware	eq	1.0.0b5-sv

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1019764

0.001 Low

EPSS

Percentile

31.7%

JSON

Related for PRION:CVE-2021-21747