CVE-2019-17524 - An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlanAccess.asp

Back Back to CVE browser

MEDIUM

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlanAccess.asp

Published Nov 13, 2019

5.4

MEDIUM

CVSS 3.1

EPSS 0.84%

Description

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlanAccess.asp. An intranet host can use a crafted hostname to exploit this.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://gitlab.com/luiss/cve_repo/blob/master/CVE-2019-17523/README.md
x_refsource_MISCExploitThird Party Advisory
https://www.technicolor.com/news
x_refsource_MISCProduct

Link	Providers	Tags
https://gitlab.com/luiss/cve_repo/blob/master/CVE-2019-17523/README.md		x_refsource_MISCExploitThird Party Advisory
https://www.technicolor.com/news		x_refsource_MISCProduct