PT-2026-93201 · Netcore · Nr255-V
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Netcore NR255-V version 1.5.130703
Description
A stored cross-site scripting issue exists within the routing and NAT configuration CGI components. Attackers can inject persistent script payloads through the route and NAT configuration pages, which are then executed in the context of users viewing the affected pages. The affected CGI components include
routing tab add cgi, routing table list show cgi, route policy add cgi, and route policy parame show cgi.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Nr255-V