CVE-2013-3962: XSS
First published: Tue Oct 01 2013(Updated: )
Cross-site scripting (XSS) vulnerability in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models before firmware 1.0.4.44, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Grandstream Gxv Device Firmware | <=1.0.4.43 | |
| Grandstream Gxv Device Firmware | =1.0.2.3 | |
| Grandstream Gxv Device Firmware | =1.0.3.9 | |
| Grandstream Gxv Device Firmware | =1.0.4.6 | |
| Grandstream Gxv Device Firmware | =1.0.4.7 | |
| Grandstream Gxv Device Firmware | =1.0.4.11 | |
| Grandstream Gxv Device Firmware | =1.0.4.16 | |
| Grandstream Gxv Device Firmware | =1.0.4.27 | |
| Grandstream Gxv Device Firmware | =1.0.4.34 | |
| Grandstream Gxv Device Firmware | =1.0.4.37 | |
| Grandstream Gxv Device Firmware | =1.0.4.38 | |
| Grandstream Gxv Device Firmware | =1.0.4.39 | |
| Grandstream Gxv Device Firmware | =1.0.4.42 | |
| Grandstream Gxv3500 | ||
| Grandstream GXV3501 | ||
| Grandstream Gxv3504 | ||
| Grandstream Gxv3601 | ||
| Grandstream Gxv3601hd\/ll | ||
| Grandstream Gxv3611hd\/ll | ||
| Grandstream Gxv3615w\/p | ||
| Grandstream Gxv3615wp Hd | ||
| Grandstream Gxv3651fhd | ||
| Grandstream Gxv3662hd |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- vendor/grandstream
- canonical/grandstream gxv device firmware
- version/grandstream gxv device firmware/1.0.4.43
- version/grandstream gxv device firmware/1.0.2.3
- version/grandstream gxv device firmware/1.0.3.9
- version/grandstream gxv device firmware/1.0.4.6
- version/grandstream gxv device firmware/1.0.4.7
- version/grandstream gxv device firmware/1.0.4.11
- version/grandstream gxv device firmware/1.0.4.16
- version/grandstream gxv device firmware/1.0.4.27
- version/grandstream gxv device firmware/1.0.4.34
- version/grandstream gxv device firmware/1.0.4.37
- version/grandstream gxv device firmware/1.0.4.38
- version/grandstream gxv device firmware/1.0.4.39
- version/grandstream gxv device firmware/1.0.4.42
- canonical/grandstream gxv3500
- canonical/grandstream gxv3501
- canonical/grandstream gxv3504
- canonical/grandstream gxv3601
- canonical/grandstream gxv3601hd\/ll
- canonical/grandstream gxv3611hd\/ll
- canonical/grandstream gxv3615w\/p
- canonical/grandstream gxv3615wp hd
- canonical/grandstream gxv3651fhd
- canonical/grandstream gxv3662hd