CVE-2014-100032 - Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject arbitrary web script or HTML via the productboardtype parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject arbitrary web script or HTML via the productboardtype parameter

Published Jan 13, 2015

4.3

MEDIUM

CVSS 2.0

EPSS 1.43%

Description

Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject arbitrary web script or HTML via the productboardtype parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

http://packetstormsecurity.com/files/128213/Airties-Air6372SO-Modem-Web-Interface-Cross-Site-Scripting.html
x_refsource_MISCExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/95957
vdb-entryx_refsource_XF

Link	Providers	Tags
http://packetstormsecurity.com/files/128213/Airties-Air6372SO-Modem-Web-Interface-Cross-Site-Scripting.html		x_refsource_MISCExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/95957		vdb-entryx_refsource_XF