Stored Cross-Site Scripting Vulnerability in Technicolor TC8715D Devices
CVE-2024-28091
Currently unrated
What is CVE-2024-28091?
The Technicolor TC8715D and TC8717T devices have been identified to contain a vulnerability that permits attackers in proximity to the Wi-Fi network to execute stored Cross-Site Scripting (XSS) attacks. This vulnerability arises from the User Defined Service functionality within the managed_services_add.asp file, which can be exploited if a victim inadvertently clicks an 'X' for deletion, thus allowing the execution of malicious scripts within the browser. Users are urged to take appropriate measures to secure their devices and mitigate potential threats.