Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page.
References
Link | Resource |
---|---|
https://jvn.jp/en/jp/JVN09166495/index.html | Third Party Advisory |
https://www.buffalo.jp/news/detail/20200911-01.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2020-09-17 23:15
Updated : 2020-09-24 06:52
NVD link : CVE-2020-5606
Mitre link : CVE-2020-5606
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
buffalo
- airstation_whr-g54s
- airstation_whr-g54s_firmware