[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248678

 
 

909

 
 

195426

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-8653Date: (C)2014-11-07   (M)2023-12-22


Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
OSVDB-113839
EXPLOIT-DB-35075
BID-70762
cbn-ch6640ecg6640e-xss(98328)
http://packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5203.php

CPE    3
cpe:/o:compal_broadband_networks:firmware:ch6640-3.5.11.7-nosh
cpe:/h:compal_broadband_networks:ch664oe_wireless_gateway:1.0
cpe:/h:compal_broadband_networks:cg6640e_wireless_gateway:1.0
CWE    1
CWE-79

© SecPod Technologies