A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown functionality of the file /goform/wlanPrimaryNetwork. The manipulation of the argument ServiceSetIdentifier with the input value ><script>alert(1)</script> leads to a cross site scripting vulnerability (Persistent). Using CWE to declare the problem leads to CWE-80. The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. Impacted is integrity.

The weakness was published 02/19/2018 by moikano as Auditando router thomson tcw710 as not defined advisory (Website). It is possible to read the advisory at alquimistadesistemas.com. The identification of this vulnerability is CVE-2018-25034. The attack may be initiated remotely. It demands that the victim is doing some kind of user interaction. Technical details as well as a public exploit are known. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

A public exploit has been developed by moikano and been published immediately after the advisory. It is declared as proof-of-concept. The exploit is available at alquimistadesistemas.com.

Addressing this vulnerability is possible by firewalling .

Similar entries are available at 126696, 126697, 126698 and 126699.

Productinfo

Vendor

• Thomson

Name

• TCW710

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion