← Back to CVEs
CVE-2021-32302
MEDIUM6.1
Description
Cross Site Scripting vulnerability in IRZ Electronics RUH2 GSM router allows attacker to obtain sensitive information via the Upload File parameter.
CVE Details
CVSS v3.1 Score6.1
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
Published2/27/2023
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
irz:ruh2irz:ruh2_firmware
Weaknesses (CWE)
CWE-79
References
http://irz.com(cve@mitre.org)
http://ruh2.com(cve@mitre.org)
http://irz.com(af854a3a-2127-422b-91ae-364da2661108)
http://ruh2.com(af854a3a-2127-422b-91ae-364da2661108)
https://s4nsec.github.io/2023/02/20/RUH2-GSM-Router-XSS-vulnerabilities.html(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.