medium4.8
CVE-2022-39996
Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to the upgrade/query.p…
Impact
Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to the upgrade/query.php page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teldat | Rs123 Firmware | All versions |
| Teldat | Rs123w Firmware | All versions |