← Database

CVE-2022-45938

CRITICAL CVSS: 9.0 Published: 2023-06-02 Modified: 2026-06-17

Description

An issue was discovered in Comcast Defined Technologies microeisbss through 2021. An attacker can inject a stored XSS payload in the Device ID field under Inventory Management to achieve Remote Code Execution and privilege escalation..

Affected Platforms

Xfinity Comcast Defined Technologies Microeisbss

Weakness Type

CWE-79, CWE-79

References