nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-6355 CVE-2024-6355
MEDIUM
Genexis Tilgin Fiber Home Gateway HG1522 cross site scripting
Record summary
CVE-2024-6355 has a selected CVSS score of 6.9 (medium).
Description
A vulnerability was found in Genexis Tilgin Fiber Home Gateway HG1522 CSx000-01_09_01_12. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /status/product_info/. The manipulation of the argument product_info leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269755. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 27, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Tilgin Fiber Home Gateway HG1522Browse Genexis / Tilgin Fiber Home Gateway HG1522Default status: unknown | CVE List | CSx000-01_09_01_12 | affected |
| csx000_01_09_01_12 | affected |
References
4VDB-269755 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/?ctiid.269755 VDB-269755 | Genexis Tilgin Fiber Home Gateway HG1522 cross site scriptingvdb entryTechnical description
https://vuldb.com/?id.269755 Submit #359289 | Tilgin FIBER HOME GATEWAY HG1522 HG13xxx_CSx000-01_09_01_12 Cross Site ScriptingThird-party advisory
https://vuldb.com/?submit.359289