CVE-2022-45938

Katalog CVE

CVSS 9.0 · Critical EPSS 45,1%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada xfinity comcast defined technologies microeisbss. Skor CVSS 3.1 9.0 (Critical) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Comcast Defined Technologies microeisbss through 2021. An attacker can inject a stored XSS payload in the Device ID field under Inventory Management to achieve Remote Code Execution and privilege escalation..

Rincian

Terbit di NVD

2 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.0 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

EPSS (30 hari)

45,1% peluang dieksploitasi; lebih tinggi dari 98,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://pensecure.medium.com/cve-2022-45938-f4c0d441da6f exploit · press/media coverage
• https://my.xfinity.com/vulnerabilityreport not applicable