NVD

Id
30220  
Name
CVE-2014-1599  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the SFR Box router with firmware NB6-MAIN-R3.3.4 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) dns, (2) dhcp, (3) nat, (4) route, or (5) lan in network/; or (6) wifi/config.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-03-09  
Modified Date
2015-08-13  
Seq
2014-1599  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160006 30220 CVE-2014-1599 20140305 CVE-2014-1599 - 39 Type-1 XSS in SFR DSL/Fiber Box  View
160007 30220 CVE-2014-1599 65973  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12725 JVNDB-2014-001600 SFR Box ルータのファームウェアにおけるクロスサイトスクリプティングの脆弱性 SFR Box ルータのファームウェアには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-1599 68886 CVE-2014-1599 30220 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001600.html 2014-02-25 2014-03-11 View