CVE-2016-10719

TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing the attacker to steal the cookie information, which contains the base64 encoded username and password.

Score
CVSS 3.0 6.1 Medium
Status
Modified - cve@mitre.org
Published
2019-05-15
Last modified
2024-08-06
Weaknesses
CWE-79

Affected products

References

 
 
© AVABIS GmbH privacypolicy about