CVE-2022-45028 — n/a / n/a

Description (CNA)

A cross-site scripting (XSS) vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://seanpesce.blogspot.com/2022/11/unauthenticated-stored-xss-in-arris.html
https://drive.google.com/file/d/1AHqvciVNMQpUoomFgtctnByewkkr24kB/view

ADP enrichment

CVE

No English description supplied.

https://seanpesce.blogspot.com/2022/11/unauthenticated-stored-xss-in-arris.html
https://drive.google.com/file/d/1AHqvciVNMQpUoomFgtctnByewkkr24kB/view

CISA-ADP

No English description supplied.

No references supplied.