CVE-2024-28092

UBEE DDW365 XCNDDW365 8.14.3105 software on hardware 3.13.1 allows a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via RgFirewallEL.asp, RgDdns.asp, RgTime.asp, RgDiagnostics.asp, or RgParentalBasic.asp. The affected fields are SMTP Server Name, SMTP Username, Host Name, Ti...

CVE-2024-28092

The UBEE DDW365 XCNDDW365 wireless router (software version 8.14.3105 on hardware 3.13.1 ) is vulnerable to stored Cross-Site Scripting (XSS) . A remote attacker within Wi-Fi proximity can exploit the vulnerability via several ASP pages, including RgFirewallEL.asp , RgDdns.asp , RgTime.asp , RgDi...

CVE-2024-28092: Improper Neutralization of Input During Web Page Generation

UBEE DDW365 XCNDDW365 8.14.3105 software on hardware 3.13.1 allows a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via RgFirewallEL.asp, RgDdns.asp, RgTime.asp, RgDiagnostics.asp, or RgParentalBasic.asp. The affected fields are SMTP Server Name, SMTP Username, Host Name, Ti...