Cross site scripting

2021-07-2612:15:00

PRIOn knowledge base

www.prio-n.com

4.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting (XSS) attack via a crafted LLDP packet.

CPENameOperatorVersion
gs1900-10hp_firmwarelt2.70
gs1900-16_firmwarelt2.70
gs1900-24_firmwarelt2.70
gs1900-24e_firmwarelt2.70
gs1900-24ep_firmwarelt2.70
gs1900-24hp_firmwarelt2.70
gs1900-24hpv2_firmwarelt2.70
gs1900-48_firmwarelt2.70
gs1900-48hp_firmwarelt2.70
gs1900-48hpv2_firmwarelt2.70

Name	Operator	Version
gs1900-10hp_firmware	lt	2.70
gs1900-16_firmware	lt	2.70
gs1900-24_firmware	lt	2.70
gs1900-24e_firmware	lt	2.70
gs1900-24ep_firmware	lt	2.70
gs1900-24hp_firmware	lt	2.70
gs1900-24hpv2_firmware	lt	2.70
gs1900-48_firmware	lt	2.70
gs1900-48hp_firmware	lt	2.70
gs1900-48hpv2_firmware	lt	2.70