CVE-2019-10677

Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote attacker to execute…

published September 5, 2019

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote attacker to execute arbitrary JavaScript via manipulation of an unsanitized GET parameter: /zhndnsdisplay.cmd (name), /wlsecrefresh.wl (wlWscCfgMethod, wl_wsc_reg).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07253 · 94.3th percentile
Published
2019-09-05T13:23Z
EPSS history
Timeline
  • 05 SEP 13:23Z
    Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote attacker to execute…
    cvelistv5