CVE-2021-34207

2021-08-2016:43:08

mitre

www.cve.org

cross-site scripting

totolink a3002r

version v1.1.1-b20200824

EPSS

0.001

Percentile

43.2%

JSON

Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the “Domain Name” field, “Server Address” field, “User Name/Email”, or “Password/Key” field.

References

github.com/pup2y/IoTVul/tree/main/TOTOLINK/A3002R

EPSS

0.001

Percentile

43.2%

JSON

Related for CVELIST:CVE-2021-34207