CVE-2007-5562

Currently unrated

Key Information:

Vendor
Netgear
Status
Ssl312
Vendor
CVE Published:
18 October 2007

Summary

Cross-site scripting (XSS) vulnerability in cgi-bin/welcome (aka the login page) in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page.

References

http://www.securityfocus.com/bid/26073
vdb-entryx_refsource_BID
http://securitytracker.com/id?1018817
vdb-entryx_refsource_SECTRACK
http://www.smash-the-stack.net/articles/Netgear_SSL312_XS...
x_refsource_MISC

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.