CVE-2015-7790

6.1MEDIUM

Key Information:

Vendor
Asus
Status
Wl-330nul Firmware
Vendor
CVE Published:
30 December 2015

Summary

Cross-site scripting (XSS) vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000195
third-party-advisoryx_refsource_JVNDB
http://www.asus.com/jp/News/FX04LE8HN0qBoqFI
x_refsource_CONFIRM
http://jvn.jp/en/jp/JVN89965717/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.