CVE-2022-1074CWE-74

TEM FLEX-1085 injection

Medium · published March 29, 2022

CVSS v3.1
4.3
EPSS
0%
Percentile
37.3
In the wild
Unconfirmed
What it is

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input <h1>HTML Injection</h1> in the WiFi settings of the dashboard leads to html injection.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00441 · 37.3th percentile
Weakness
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Published
2022-03-29T05:50Z
EPSS history
Timeline
  • 29 MAR 05:50Z
    TEM FLEX-1085 injection
    cvelistv5