CVE-2017-2148: XSS
Cross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2148?
CVE-2017-2148 is classified as a cross-site scripting vulnerability, which poses a medium to high severity risk depending on the exploit context.
How do I fix CVE-2017-2148?
To mitigate CVE-2017-2148, upgrade the WN-AC1167GR firmware to version 1.05 or later.
What types of attacks can exploit CVE-2017-2148?
CVE-2017-2148 can be exploited by authenticated remote attackers via injected web scripts or HTML into the firmware interface.
Who is affected by CVE-2017-2148?
Users of WN-AC1167GR firmware version 1.04 and earlier are affected by CVE-2017-2148.
Are there any workarounds for CVE-2017-2148?
While the best solution is to upgrade the firmware, users can limit access to the device's management interface to mitigate risks associated with CVE-2017-2148.