Cross Site Scripting Vulnerability in Teradek Brik Firmware
CVE-2021-37377

5.4MEDIUM

Key Information:

Vendor

Teradek

Status
Brik Firmware
Vendor
CVE Published:
3 February 2023

What is CVE-2021-37377?

The Teradek Brik firmware prior to version 7.2.x is susceptible to a Cross Site Scripting (XSS) vulnerability, allowing remote attackers to execute arbitrary code via manipulation of the Friendly Name field in System Information Settings. This security flaw arises from inadequate input sanitization. It is important to note that Teradek has declared the product as End of Life, meaning it will no longer receive firmware updates to mitigate this risk.

References

https://tbutler.org/2021/04/29/teradek-vulnerability-advi...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2021-37377 : Cross Site Scripting Vulnerability in Teradek Brik Firmware