XSS Vulnerability in COMFAST CF-WR623N Router Firmware
CVE-2022-47701

6.1MEDIUM

Key Information:

Vendor: Comfast Project
Status: Cf-wr623n Firmware
Vendor: CVE Published:; 31 January 2023

🔔 Create Comfast Project Vulnerability Alert

What is CVE-2022-47701?

The COMFAST CF-WR623N Router firmware V2.3.0.1 is susceptible to a Cross Site Scripting (XSS) vulnerability, which can allow unauthorized access or manipulation of system resources. This flaw can be exploited by attackers to inject malicious scripts into webpages viewed by users, potentially compromising sensitive information and leading to unauthorized actions within the affected device.

References

https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/...

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 31, 2023
Vulnerability Reserved
Dec 21, 2022

CVE-2022-47701 Data

JSON