CVE-2014-1599 Multiple cross-site scripting (XSS) vulnerabilities in the SFR Box router with firmware NB6-MAIN-R3.3.4 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1)....
MediumCVSS 4.3
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the SFR Box router with firmware NB6-MAIN-R3.3.4 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) dns, (2) dhcp, (3) nat, (4) route, or (5) lan in network/; or (6) wifi/config.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sfr box router firmware | = nb6-main-r3.3.4 | No fix listed |
| sfr box router | All versions | No fix listed |
References
- 20140305 CVE-2014-1599 - 39 Type-1 XSS in SFR DSL/Fiber Box mailing-list
- 65973 vdb-entry