Required CVE Record Information
Description
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Password parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of the vulnerable targeted system. Successful exploitation of this vulnerability could allow the attacker to perform stored XSS attacks on the targeted system.
CWE 1 Total
CVSS 1 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.9 | MEDIUM | 3.1 | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N |
Credits
- This vulnerability is reported by Sushant Mane, Parul Sindhwad, Tushar Nagrare and Dr. Faruk Kazi from CoE-CNDS Lab, VJTI Mumbai, India. finder
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.