Skip to content

CVE-2014-4871 Cross-site scripting (XSS) vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote attackers to inject arbitrary web script o...

MediumCVSS 4.3 EPSS 1.1%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote attackers to inject arbitrary web script or HTML via the wlWpaPsk parameter.

Affected products

ProductAffected versionsFixed in
netcommwireless nb604n firmware <= gan5.cz56t-b-nc.au-r4b010.en No fix listed
netcommwireless nb604n All versions No fix listed

References

  • VU#941108 third-party-advisory us-government-resource
  • 70253 vdb-entry