CVE-2009-4196

Huawei MT882 V100R002B020 ARG-T 3.7.9.98 - XSS

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-4196. PoCs published by DecodeX01.

AI-analyzed exploit summary This is a detailed technical analysis of CVE-2009-4196, focusing on multiple XSS vulnerabilities in a RomPager/4.07 UPnP/1.0 device. It includes affected endpoints, payload examples, and impact assessment.

Description

Multiple cross-site scripting (XSS) vulnerabilities in multiple scripts in Forms/ in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 allow remote attackers to inject arbitrary web script or HTML via the (1) BackButton parameter to error_1; (2) wzConnFlag parameter to fresh_pppoe_1; (3) diag_pppindex_argen and (4) DiagStartFlag parameters to rpDiag_argen_1; (5) wzdmz_active and (6) wzdmzHostIP parameters to rpNATdmz_argen_1; (7) wzVIRTUALSVR_endPort, (8) wzVIRTUALSVR_endPortLocal, (9) wzVIRTUALSVR_IndexFlag, (10) wzVIRTUALSVR_localIP, (11) wzVIRTUALSVR_startPort, and (12) wzVIRTUALSVR_startPortLocal parameters to rpNATvirsvr_argen_1; (13) Connect_DialFlag, (14) Connect_DialHidden, and (15) Connect_Flag parameters to rpStatus_argen_1; (16) Telephone_select, and (17) wzFirstFlag parameters to rpwizard_1; and (18) wzConnectFlag parameter to rpwizPppoe_1.

Exploits (1)

exploitdb WRITEUP VERIFIED
by DecodeX01 · textwebappshardware
https://www.exploit-db.com/exploits/10276

This is a detailed technical analysis of CVE-2009-4196, focusing on multiple XSS vulnerabilities in a RomPager/4.07 UPnP/1.0 device. It includes affected endpoints, payload examples, and impact assessment.

Classification
Writeup 95%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: RomPager/4.07 UPnP/1.0 (Firmware Release: 3.7.9.98)
No auth needed
Prerequisites: Network access to the target device
MITRE ATT&CK
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/10276
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/54526
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/37194

Scores

EPSS 0.0103
EPSS Percentile 59.7%

Details

CWE
CWE-79
Status published
Products (1)
huawei/mt882_v100t002b020_arg-t firmware_3.7.9.98
Published Dec 04, 2009
Tracked Since Feb 18, 2026