Cross-Site Scripting Vulnerability in Netis WF2419 Devices
CVE-2018-5967

5.4MEDIUM

Key Information:

Vendor

Netis-systems

Status
Wf2419 Firmware
Vendor
CVE Published:
25 January 2018

What is CVE-2018-5967?

The Netis WF2419 devices are susceptible to a Cross-Site Scripting (XSS) vulnerability due to improper handling of input in the Description parameter on the Bandwidth Control Rule Settings page. This vulnerability could allow an attacker to inject malicious scripts, which may lead to unauthorized access or control of the device by exploiting the user's session. It is crucial for users of the affected versions to implement security measures and updates to mitigate the potential risks.

References

https://packetstormsecurity.com/files/145513/Netis-WF2419...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.