Cross Site Scripting Vulnerability in COMFAST CF-WR623N Router
CVE-2022-47698

6.1MEDIUM

Key Information:

Vendor: Comfast Project
Status: Cf-wr623n Firmware
Vendor: CVE Published:; 31 January 2023

🔔 Create Comfast Project Vulnerability Alert

What is CVE-2022-47698?

The CF-WR623N Router firmware version 2.3.0.1 from COMFAST is susceptible to Cross Site Scripting (XSS) through its URL filtering feature. This vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, potentially compromising sensitive information and user sessions. Organizations using this router should take immediate steps to mitigate the risks associated with this exposure and ensure their network security.

References

https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/...

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 31, 2023
Vulnerability Reserved
Dec 21, 2022

CVE-2022-47698 Data

JSON