CVE-2021-37377

2023-02-0300:00:00

mitre

github.com

cross site scripting

teradek brik

firmware vulnerability

remote code execution

end of life

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

31.9%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Cross Site Scripting (XSS) vulnerability in Teradek Brik firmware version 7.2.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address this issue.