A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects some unknown processing of the file /goform/RgDhcp. The manipulation of the argument PppUserName with the input value ><script>alert(1)</script> leads to a cross site scripting vulnerability (Persistent). CWE is classifying the issue as CWE-80. The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. This is going to have an impact on integrity.

The weakness was shared 02/19/2018 by moikano as Auditando router thomson tcw710 as not defined advisory (Website). It is possible to read the advisory at alquimistadesistemas.com. This vulnerability is uniquely identified as CVE-2018-25038. It is possible to initiate the attack remotely. It demands that the victim is doing some kind of user interaction. Technical details and a public exploit are known. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

A public exploit has been developed by moikano and been published immediately after the advisory. It is declared as proof-of-concept. The exploit is shared for download at alquimistadesistemas.com.

It is possible to mitigate the weakness by firewalling .

The entries 126695, 126696, 126697 and 126698 are related to this item.

Productinfo

Vendor

• Thomson

Name

• TCW710

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion