PT-2022-15137
CVE-2022-21799
·
Published
2022-02-08
·
Updated
2022-02-11
Description by
CVSS 3.1
5.2
MediumMetricsAV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
ELECOM LAN router WRC-300FEBK-R versions 1.13 and earlier
Description
A cross-site scripting issue allows an attacker on the adjacent network to inject an arbitrary script via unspecified vectors. This can be exploited by an attacker to inject malicious scripts.
Recommendations
For ELECOM LAN router WRC-300FEBK-R versions 1.13 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾