PT-2020-7774

CVE-2014-9405

·

Published

2020-01-06

·

Updated

2020-01-13

Description by

CVSS 2.0
3.5
Low
MetricsAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions: Freebox OS Web interface version 3.0.2
Description: A Cross-Site Scripting (XSS) issue exists in the description field of a Download RSS item or Contacts, allowing malicious users to execute arbitrary code.
Recommendations: For Freebox OS Web interface version 3.0.2, update to a version that fixes this issue to prevent arbitrary code execution.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2014-9405
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com