Stored Cross-Site Scripting Vulnerability in NetComm Wireless Routers
CVE-2017-11647

5.4MEDIUM

Key Information:

Vendor

Netcomm

Status
4gt101w Software
4gt101w Bootloader
Vendor
CVE Published:
28 July 2017

What is CVE-2017-11647?

The NetComm Wireless 4GT101W routers are susceptible to stored cross-site scripting attacks. When a user creates a Wi-Fi SSID that contains an XSS payload, this can lead to successful exploitation where attackers can execute arbitrary JavaScript in the context of a user's browser. This vulnerability poses significant risks, as it may allow unauthorized access to sensitive information or manipulation of web applications viewed by the compromised device. Users are advised to avoid creating SSIDs with potentially malicious characters and to keep their router firmware up to date.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://iscouncil.blogspot.com/2017/07/cross-site-scripti...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.