CVE-2019-17524

CVE-2019-17524 describes an XSS vulnerability affecting Technicolor TC7300 STFA.51.20 devices. The issue stems from the web interface where an attacker can inject arbitrary script via the "Connected Clients" field to /wlanAccess.asp; an intranet host can exploit this with a crafted hostname. Mult...