CVE-2017-11320

Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker to cause DNS Poisoning and steal credentials from the router.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-08-03

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Tc7337 Firmware (Technicolor)

References

• http://seclists.org/fulldisclosure/2017/Aug/3
• https://www.exploit-db.com/exploits/42427/