VulnerabilityDeferred

CVE-2024-51432

Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized

MEDIUM 4.8EPSS 0.27%

Does this matter?

Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.

Description

Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized

CVSS 3.1: 4.8 MEDIUMCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.27% probability · 19th percentile
CISA KEV: Not listed
Weakness: CWE-79
Source: cve@mitre.org

References

https://en.fiberhome.com/
https://github.com/MatJosephs/CVEs/tree/main/CVE-2024-51432

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.