medium5.4
CVE-2019-17523
An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName parameter to /FTPDiag.asp.
Impact
An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName parameter to /FTPDiag.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Technicolor | Tc7300.B0 Firmware | Version stfa.51.20 |