CVE-2022-36325CWE-80

Affected devices do not properly sanitize data introduced by an user when rendering the web interface

Medium · published August 10, 2022

CVSS v3.1
6.8
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00956 · 61.0th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2022-08-10T11:18Z
EPSS history
Timeline
  • 10 AUG 11:18Z
    Affected devices do not properly sanitize data introduced by an user when rendering the web interface
    cvelistv5