Design/Logic Flaw

2019-06-1017:29:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.3%

JSON

XSS on the PIX-Link Repeater/Router LV-WR09 with firmware v28K.MiniRouter.20180616 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID.

CPENameOperatorVersion
lv-wr09_firmwareeq28.0.0-k-minirouter.20180616

CPE	Name	Operator	Version
	lv-wr09_firmware	eq	28.0.0-k-minirouter.20180616

References

www.pix-link.com/page50?product_id=144

medium.com/@igor.lrgomes/cve-2019-11877-credentials-stealing-through-xss-on-pix-link-repeater-9a98c344f58e