Lucene search

K
cveMitreCVE-2009-1557
HistoryMay 06, 2009 - 4:30 p.m.

CVE-2009-1557

2009-05-0616:30:00
CWE-79
mitre
web.nvd.nist.gov
19
cwe-79
cve-2009-1557
cisco
linksys
wvc54gca
xss
firmware
web script
html
remote attackers

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.408

Percentile

97.3%

Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allow remote attackers to inject arbitrary web script or HTML via the next_file parameter to (1) main.cgi, (2) img/main.cgi, or (3) adm/file.cgi; or (4) the this_file parameter to adm/file.cgi.

Affected configurations

Nvd
Node
ciscowvc54gcaMatch1.00r22
OR
ciscowvc54gcaMatch1.00r24
VendorProductVersionCPE
ciscowvc54gca1.00r22cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
ciscowvc54gca1.00r24cpe:2.3:h:cisco:wvc54gca:1.00r24:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.408

Percentile

97.3%

Related for CVE-2009-1557