PT-2015-7101
CVE-2015-5992
·
تاريخ النشر
2015-09-21
·
تاريخ التحديث
2015-09-22
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
PLDT SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN
Kasda KW58293 devices
Description
A cross-site scripting (XSS) issue exists in the form2WlanSetup.cgi file, allowing remote attackers to inject arbitrary web script or HTML via the
ssid parameter. This could potentially lead to unauthorized actions on the device.Recommendations
For PLDT SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN, avoid using the
ssid parameter in the form2WlanSetup.cgi file until the issue is resolved.
For Kasda KW58293 devices, restrict access to the form2WlanSetup.cgi file to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾