PT-2023-12316 · Teradek · Teradek Sphere

CVE-2021-37379

·

Publicado

2023-02-03

·

Atualizado

2024-08-04

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Teradek Sphere all firmware versions
Description The issue allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. This is a Cross Site Scripting (XSS) issue. The vendor states that the product has reached End of Life and will not be receiving any firmware updates to address this issue.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2021-37379

Produtos afetados

Teradek Sphere