CVE-2016-1207

MEDIUM · 5.4 CVSS Gepubliceerd: 14-05-2016 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12 and earlier, WN-G300R2 devices with firmware 1.12 and earlier, and WN-G300R3 devices with firmware 1.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Vendors

Iodata

Affected products

Wn-g300r2 Wn-g300r2 Firmware Wn-g300r3 Wn-g300r3 Firmware Wn-g300r Wn-g300r Firmware

References

jvn.jp
jvndb.jvn.jp
www.iodata.jp