Multiple cross-site scripting (XSS) vulnerabilities in Belkin N900 router allow remote attackers to inject arbitrary web script or HTML via the (1) ssid2 parameter to wl_channel.html or (2) guest_psk parameter to wl_guest.html.
CVSS Vector
AV:N/AC:M/Au:N/C:N/I:P/A:NBelkin N900
HWBelkinall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References
Related vulnerabilities
CVE-2013-3088CRITICAL9.8PL ✓same product
Obejście uwierzytelniania w routerze Belkin N900 przez debugowanie JavaScript
CVE-2013-4655HIGH7.5same product
Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service.
CVE-2013-3086MEDIUM6.8same product
Cross-site request forgery (CSRF) vulnerability in util_system.html in Belkin N900 router allows remote attack...
CVE-2023-27217CRITICAL9.8PL ✓same vendor
Stack-based buffer overflow w Belkin Smart Outlet V2 F7C063 via UPnP
CVE-2022-30105CRITICAL9.8PL ✓same vendor
Belkin N300 Firmware — zdalne command injection z uprawnieniami root