CVE-2023-51732
Assigner: CERT-In
Published: 2024-01-17T07:07:56.049Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Skyworth Router CM5100
vendor: Hathway
versions: lessThanOrEqual: 4.1.1.24
status: affected
version: 0
versionType: custom
credits: type: finder
value: This vulnerability is reported by Sushant Mane, Parul Sindhwad, Tushar Nagrare and Dr. Faruk Kazi from CoE-CNDS Lab, VJTI Mumbai, India. 
descriptions: supportingMedia: base64: no
type: text/html
value: This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the IPsec Tunnel Name parameter at its web interface.  A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of the vulnerable targeted system.<br><br>Successful exploitation of this vulnerability could allow the attacker to perform stored XSS attacks on the targeted system.<br>
value: This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the IPsec Tunnel Name parameter at its web interface.  A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of the vulnerable targeted system.

Successful exploitation of this vulnerability could allow the attacker to perform stored XSS attacks on the targeted system.

impacts: capecId: CAPEC-592
descriptions: value: CAPEC-592 Stored XSS
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: Upgrade to latest version 4.1.1.25 or later.<br>
value: Upgrade to latest version 4.1.1.25 or later.

source: discovery: UNKNOWN
title: Stored Cross Site Scripting Vulnerability in Skyworth Router