CVE-2014-8508

2014-11-0615:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.5%

JSON

Cross-site scripting (XSS) vulnerability in s_network.asp in the Denon AVR-3313CI audio/video receiver allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to Friendlyname.

References

www.securityfocus.com/bid/70892

www.zerodayinitiative.com/advisories/ZDI-14-371/