CVE-2025-70545 in ONT 2K05X Router
Resumen
por MITRE • 2026-02-04
A stored cross-site scripting (XSS) vulnerability exists in the web management interface of the PPC (Belden) ONT 2K05X router running firmware v1.1.9_206L. The Common Gateway Interface (CGI) component improperly handles user-supplied input, allowing a remote, unauthenticated attacker to inject arbitrary JavaScript that is persistently stored and executed when the affected interface is accessed.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.