CVE-2021-32302

Cross Site Scripting vulnerability in IRZ Electronics RUH2 GSM router allows attacker to obtain sensitive information via the Upload File parameter.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2023-02-27

Last modified

2026-07-09

Weaknesses

CWE-79

Affected products

• Ruh2 Firmware (Irz)

References

• https://s4nsec.github.io/2023/02/20/RUH2-GSM-Router-XSS-vulnerabilities.html