CVE-2019-17523

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName parameter to /FTPDiag.asp.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2019-11-13

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Tc7300.b0 Firmware (Technicolor)

References

• https://gitlab.com/luiss/cve_repo/blob/master/CVE-2019-17524/README.md
• https://www.technicolor.com/news