Main Vulnerability Database Vulnerabilities #VU76385

#VU76385 Client-Side Enforcement of Server-Side Security in T&D Corporation products - CVE-2023-22654

Published: May 19, 2023

Vulnerability identifier: #VU76385

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2023-22654

CWE-ID: CWE-602

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
TR-71W
TR-72W
RTR-5W
WDR-7
WDR-3
WS-2

Software vendor:
T&D Corporation

Description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to a client-side control issue. A remote user can execute arbitrary script on a logged-in user's web browser.

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.