CVE-2024-28092

UBEE DDW365 XCNDDW365 8.14.3105 software on hardware 3.13.1 allows a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via RgFirewallEL.asp, RgDdns.asp, RgTime.asp, RgDiagnostics.asp, or RgParentalBasic.asp. The affected fields are SMTP Server Name, SMTP Username, Host Name, Ti...

CVE-2024-28092

CVE-2024-28092 concerns UBEE DDW365 XCNDDW365 software version 8.14.3105 on hardware 3.13.1. The issue allows a remote attacker within Wi‑Fi proximity to perform stored cross‑site scripting (XSS) attacks through the ASP pages: RgFirewallEL.asp, RgDdns.asp, RgTime.asp, RgDiagnostics.asp, and RgPar...