CVE-2025-2191: Claro A7600-A1 Ping6 Diagnóstico form2pingv6.cgi cross site scripting
A vulnerability, which was classified as problematic, has been found in Claro A7600-A1 RNR4-A72T-2x16v2110403CLA32160817. Affected by this issue is some unknown functionality of the file /form2pingv6.cgi of the component Ping6 Diagnóstico. The manipulation of the argument ip6addr with the input <img/src/onerror=prompt(8)> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2191?
CVE-2025-2191 is classified as a problematic vulnerability.
What component is affected by CVE-2025-2191?
CVE-2025-2191 affects the Ping6 Diagnóstico functionality of the Claro A7600-A1.
How can I exploit CVE-2025-2191?
CVE-2025-2191 can be exploited by manipulating the ip6addr argument in the /form2pingv6.cgi file.
What are the potential impacts of CVE-2025-2191?
The exploitation of CVE-2025-2191 could lead to unauthorized actions affecting network configuration.
How do I fix CVE-2025-2191?
To fix CVE-2025-2191, apply the latest security patches and updates provided by Claro for the A7600-A1.