What is CVE-2022-23136?

CVE-2022-23136 is a medium-severity vulnerability in Zte Zxhn F680, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2022-03-30.

How severe is CVE-2022-23136?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Zte Zxhn F680

CVE-2022-23136

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.004 (35.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Zte Zxhn_f680
Zte Zxhn_f680_firmware — versions 6.0.10p3n20
N/a Zxhn F680 — versions V6.0.10P3N20

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@zte.com.cn (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-23136?: CVE-2022-23136 is a medium-severity vulnerability in Zte Zxhn F680, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2022-03-30.
How severe is CVE-2022-23136?: Medium severity. CVSS v3 base score is 5.4 out of 10.