← Database

CVE-2022-45028

MEDIUM CVSS: 6.1 Published: 2022-12-13 Modified: 2026-06-17

Description

A cross-site scripting (XSS) vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha.

Affected Platforms

Arris Nvg443B FirmwareArris Nvg443B

Weakness Type

CWE-79, CWE-79

References