medium4.3Public exploit code
CVE-2014-10018
Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Teracom Modem T2-B-Gawv1.4U10Y-BI - Persistent Cross-Site Scripting2014-01-20 · webapps · hardware
Impact
Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teracom | T2-B-Gawv1.4u10y-Bi | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/102343
- http://www.exploit-db.com/exploits/31087
- http://www.securityfocus.com/bid/65056
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90642
- http://osvdb.org/102343
- http://www.exploit-db.com/exploits/31087
- http://www.securityfocus.com/bid/65056
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90642