What is CVE-2023-0639?

CVE-2023-0639 is a low-severity vulnerability in Trendnet Tew-652brp, classified under Cross-site Scripting. CVSS score: 2.4/10. Published 2023-02-02.

How severe is CVE-2023-0639?

Low severity. CVSS v3 base score is 2.4 out of 10.

XSS in Trendnet Tew-652brp

CVE-2023-0639

A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and classified as problematic. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation of the argument nextPage leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-220019.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.004 (28.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.4 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N.

Affected products

Trendnet Tew-652brp — versions 3.04b01
Trendnet Tew-652brp_firmware — versions 3.04b01

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cna@vuldb.com (Permissions Required, technical-description, Third Party Advisory, vdb-entry)
cna@vuldb.com (signature, Permissions Required, Third Party Advisory)

Frequently asked questions

What is CVE-2023-0639?: CVE-2023-0639 is a low-severity vulnerability in Trendnet Tew-652brp, classified under Cross-site Scripting. CVSS score: 2.4/10. Published 2023-02-02.
How severe is CVE-2023-0639?: Low severity. CVSS v3 base score is 2.4 out of 10.