CVE-2017-5900

Cross-site scripting (XSS) vulnerability in the NetComm NB16WV-02 router with firmware NB16WV_R0.09 allows remote authenticated users to inject arbitrary web script or HTML via the S801F0334 parameter to hdd.htm.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2017-03-29

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Nb16wv-02 Firmware (Netcomm)

References

• http://seclists.org/fulldisclosure/2017/Mar/75
• http://www.securityfocus.com/bid/97161
• http://www.securitytracker.com/id/1038171