Description
Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Corega | CG-WLR300NX | firmware Ver. 1.20 and earlier | — |
References
- JVN#92237169 third-party-advisory
- http://corega.jp/support/security/20161111_wlr300nx.htm
- 94248 vdb-entry