Stored XSS Vulnerability in Nokia G-120W-F Devices
CVE-2021-30003

4.8MEDIUM

Key Information:

Vendor

Nokia
Status
G-120w-f Firmware
Vendor
CVE Published:
2 April 2021

What is CVE-2021-30003?

A vulnerability exists in the administrative interface of Nokia G-120W-F devices that allows an attacker to execute arbitrary JavaScript code through stored XSS. This issue can be exploited by adding a malicious URL through the urlfilter.cgi?add url_address endpoint, impacting the device management interface and potentially leading to unauthorized actions and data exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://research.0xdutra.com/posts/router-g120w-f/
x_refsource_MISC

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.