← Database

CVE-2022-39996

MEDIUM CVSS: 4.8 Published: 2024-08-27 Modified: 2026-06-17

Description

Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to the upgrade/query.php page.

Affected Platforms

Teldat Rs123Teldat Rs123W FirmwareTeldat Rs123 FirmwareTeldat Rs123W

Weakness Type

CWE-79, CWE-79

References