medium5.4
CVE-2019-17524
An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlan…
Impact
An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlanAccess.asp. An intranet host can use a crafted hostname to exploit this.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Technicolor | Tc7300.B0 Firmware | Version stfa.51.20 |