VulnerabilityModified
CVE-2023-0639
A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and classified as problematic.
MEDIUM 6.1EPSS 0.36%
Does this matter?
Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and classified as problematic. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation of the argument nextPage leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-220019.
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.36% probability · 30th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- trendnet/tew-652brp firmware
- Source
- cna@vuldb.com
References
- https://vuldb.com/?ctiid.220019Permissions Required, Third Party Advisory
- https://vuldb.com/?id.220019Permissions Required, Third Party Advisory
- https://vuldb.com/?ctiid.220019Permissions Required, Third Party Advisory
- https://vuldb.com/?id.220019Permissions Required, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.