CVE Feed

    Dashboard / CVE / CVE-2022-39996

    CVE-2022-39996

    Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to the upgrade/query.php page.

    Published:Aug 27, 2024
    Last Modified:Aug 30, 2024
    EPS:Aug 27, 2024
    EPSS Score:0.0009
    CVSS Score:4.8

    Affected Products

    Vendor
    Teldat
    Product
    Rs123
    Vendor
    Teldat
    Product
    Rs123 Firmware
    Vendor
    Teldat
    Product
    Rs123w
    Vendor
    Teldat
    Product
    Rs123w Firmware

    Exploits

    https://github.com/uyhacked/Teldat-s-Router/blob/main/Teldat%27s%20Router%20Vulnerability.mdhttps://github.com/uyhacked/Teldat-Router-CVE-2022-POC

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High