medium6.1
CVE-2023-39678
A cross-site scripting (XSS) vulnerability in the device web interface (Log Query page) of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute…
Impact
A cross-site scripting (XSS) vulnerability in the device web interface (Log Query page) of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bdcom | P3310d-2ac Firmware | Version 10.1.0f |