Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a network broadcast.
References
Link | Resource |
---|---|
http://seclists.org/fulldisclosure/2018/Oct/18 | Exploit Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2018-10-10 14:29
Updated : 2018-11-28 10:04
NVD link : CVE-2018-17337
Mitre link : CVE-2018-17337
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
intelbras
- nplug
- nplug_firmware