Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Stored XSS via DHCP Discover Request Hostname
Vulnerability Description
In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, by sending a DHCP discover request containing a malicious hostname field, an attacker may execute stored XSS attacks against this device. When the malicious DHCP request is received, the device will generate a log entry containing the malicious hostname. This log entry may then be viewed at Advanced settings->Administration->Logs to trigger the exploit. Although this value is inserted into a textarea tag, converted to all-caps, and limited in length, attacks are still possible.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NETGEAR Nighthawk X10-R9000 跨站脚本漏洞
Vulnerability Description
NETGEAR Nighthawk X10-R9000是美国网件（NETGEAR）公司的一款无线路由器。 使用1.0.4.24之前版本固件的NETGEAR Nighthawk X10-R9000中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
CVSS Information
N/A
Vulnerability Type
N/A