Description
Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuq31129, CSCuq31134, CSCuq31137, and CSCuq31563.
References
- 20140826 Multiple Cross-Site Scripting Vulnerabilities in Transport Gateway for Smart Call Home vendor-advisory
- 60278 third-party-advisory
- 1030760 vdb-entry
- cisco-tgsch-cve20143344-xss(95482) vdb-entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35431
- 69412 vdb-entry