← Zuruck zu CVEs
CVE-2021-32302
MEDIUM6.1
Beschreibung
Cross Site Scripting vulnerability in IRZ Electronics RUH2 GSM router allows attacker to obtain sensitive information via the Upload File parameter.
CVE Details
CVSS v3.1 Bewertung6.1
SchweregradMEDIUM
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionREQUIRED
Veroffentlicht2/27/2023
Zuletzt geandert11/21/2024
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
irz:ruh2irz:ruh2_firmware
Schwachen (CWE)
CWE-79
Referenzen
http://irz.com(cve@mitre.org)
http://ruh2.com(cve@mitre.org)
http://irz.com(af854a3a-2127-422b-91ae-364da2661108)
http://ruh2.com(af854a3a-2127-422b-91ae-364da2661108)
https://s4nsec.github.io/2023/02/20/RUH2-GSM-Router-XSS-vulnerabilities.html(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.