CVE-2014-10018

Teracom T2-b-gawv1.4u10y-bi - XSS

Title source: rule
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter.

Exploits (1)

exploitdb WORKING POC
by Rakesh S · textwebappshardware
https://www.exploit-db.com/exploits/31087

References (4)

Core 4
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/65056
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/31087
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/90642
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/102343

Scores

EPSS 0.0075
EPSS Percentile 73.3%

Details

CWE
CWE-79
Status published
Products (1)
teracom/t2-b-gawv1.4u10y-bi
Published Jan 13, 2015
Tracked Since Feb 18, 2026