CVE-2021-27403

UNAUTHENTICATED Cross-Site Scripting - Askey Internet Fiber Modem Vendor: Askey Software Version: BRSVg11.11RTFTEF001V6.54V014 Model: RTF8115VW Vulnerable Param: curWebPage Payload: ";alert'xss'// Not tested in other model/version. Via GET REQUEST At the login request we can issue a GET Request:...

CVE-2021-27403

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...

CVE-2021-27403

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...

PT-2021-17442

Name of the Vulnerable Software and Affected Versions Askey RTF8115VW BR SV g11.11 RTF TEF001 V6.54 V014 Description The issue concerns a XSS vulnerability in the "cgi-bin/te acceso router.cgi" endpoint, specifically with the curWebPage parameter. This allows for potential exploitation...

CVE-2021-27403: Improper Neutralization of Input During Web Page Generation

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...

Askey RTF8115VW Cross-Site Scripting Vulnerability

Askey RTF8115VW is an application from Askey China. Provides the most stable broadband connection source to bring super-fast speeds to all types of users. A cross-site scripting vulnerability exists in Askey RTF8115VW. The vulnerability stems from cgi-bin/teaccesorouter.cgi curWebPage missing...