NetComm NB16WV-02 Cross Site Scripting

NetComm NB16WV-02 suffers from a persistent cross site scripting vulnerability.

MD5 | 57e40e787ed8059944575ca57c5b8030

Mitre has provided the following with the CVE number: CVE-2017-5900

there is a Stored XSS vulnerability in a NetComm router's model NB16WV-02
running version NB16WV_R0.09, If authorized user is able to inject the
following string

Authenticated user is required:

Stored XSS will be injected and execute on the page reload.
This vulnearbilty can be used to steal session, cookies and many more.

NetComm will be releasing a patch in the coming weeks to address
this issue.

Related Posts