Improper input validation in Axesstel Mv 410r

CVE-2009-2320

The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote attackers to send crafted data, and possibly have unspecified other impact, via a client that does not process JavaScript.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.012 (64.7th percentile) — read the EPSS interpretation.

Affected products

Axesstel Mv_410r
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)