Lucene search
China National Vulnerability DatabaseCNVD-2023-43024HistoryMay 06, 2023 - 12:00 a.m.
NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43024)
2023-05-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
netgear
srx5308
vpn
firewall
vulnerability
cross-site scripting
manipulation
parameter
wanname
sensitive information
user cookies
attacker
exploit
EPSS
0.001
Percentile
40.8%
The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that stems from an incorrect manipulation of the parameter wanName. The vulnerability can be exploited by an attacker to obtain sensitive information such as user cookies.
Related
cve
cve
CVE-2023-2394
2023-04-28 21:15:09
nvd
nvd
CVE-2023-2394
2023-04-28 21:15:09
prion
prion
Cross site scripting
2023-04-28 21:15:00
cvelist
cvelist
CVE-2023-2394 Netgear SRX5308 Web Management Interface cross site scripting
2023-04-28 21:00:06