Cross site scripting

2023-02-0318:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

teradek sphere

firmware

vulnerability

remote attackers

arbitrary code

end of life

0.001 Low

EPSS

Percentile

30.5%

JSON

UNSUPPORTED WHEN ASSIGNED Cross Site Scripting (XSS) vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address this issue.

References

tbutler.org/2021/04/29/teradek-vulnerability-advisory

0.001 Low

EPSS

Percentile

30.5%

JSON

Related for PRION:CVE-2021-37379