Lucene search
HistoryOct 26, 2006 - 5:07 p.m.
CVE-2006-5537
cve-2006-5537
xss
d-link
dsl-g624t
firmware
security vulnerability
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.6%
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the (1) upnp:settings/state or (2) upnp:settings/connection parameters.
Affected configurations
Node
d-linkdsl-g624tMatchfirmware_3.00b01t01.ya_c.2006-06-16
| CPE | Name | Operator | Version |
|---|---|---|---|
| d-link:dsl-g624t | d-link dsl-g624t | eq | firmware_3.00b01t01.ya_c.2006-06-16 |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.6%
Related for CVE-2006-5537