Record summary

CVE-2017-16836 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.

Description

Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajax_managed_services.php service parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBArris TG1682G Modem - Persistent Cross-Site ScriptingExploitDB exploitby Nu11By73Not analyzed1 file
ExploitDB

PoC details

References

3