Lucene search
PRIOn knowledge basePRION:CVE-2023-51738HistoryJan 17, 2024 - 8:15 a.m.
Input validation
2024-01-1708:15:00
PRIOn knowledge base
www.prio-n.com
2
input validation
skyworth router
version 4.1.1.24
network name
remote attacker
stored xss
web interface
vulnerability
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Network Name (SSID) parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of the vulnerable targeted system.
Successful exploitation of this vulnerability could allow the attacker to perform stored XSS attacks on the targeted system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cm5100_firmware | eq | 4.1.1.24 |
Related
cve
cve
CVE-2023-51738
2024-01-17 08:15:37
nvd
nvd
CVE-2023-51738
2024-01-17 08:15:37
cvelist
cvelist
CVE-2023-51738 Stored Cross Site Scripting Vulnerability in Skyworth Router
2024-01-17 07:19:23