Vulnerability Details CVE-2017-5900
Cross-site scripting (XSS) vulnerability in the NetComm NB16WV-02 router with firmware NB16WV_R0.09 allows remote authenticated users to inject arbitrary web script or HTML via the S801F0334 parameter to hdd.htm.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.0%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References
Products affected by CVE-2017-5900
-
cpe:2.3:h:netcomm:nb16wv-02:-
-
cpe:2.3:o:netcomm:nb16wv-02_firmware:nb16wv_r0.09