An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add url_address.
References
Link | Resource |
---|---|
https://research.0xdutra.com/posts/router-g120w-f/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
07 Apr 2021, 13:25
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://research.0xdutra.com/posts/router-g120w-f/ - Exploit, Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 4.8 |
CPE | cpe:2.3:h:nokia:g-120w-f:-:*:*:*:*:*:*:* cpe:2.3:o:nokia:g-120w-f_firmware:3fe46606agab91:*:*:*:*:*:*:* |
|
CWE | CWE-79 |
02 Apr 2021, 05:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-04-02 05:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-30003
Mitre link : CVE-2021-30003
CVE.ORG link : CVE-2021-30003
JSON object : View
Products Affected
nokia
- g-120w-f
- g-120w-f_firmware
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')