CVE-2021-37376: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving...

CVE-2021-37376

Teradek Bond family (Bond, Bond 2, Bond Pro) firmware 7.3.x and earlier is affected by a Cross Site Scripting (XSS) issue in the Friendly Name field of System Information Settings that could allow remote code execution. Root cause details are not provided beyond the vulnerable field, and multiple...