CVE-2016-10719 in TP-LINK Archer CR-700
摘要 (英语)
TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing the attacker to steal the cookie information, which contains the base64 encoded username and password.
预定
2018-04-05
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 135062 | TP-LINK Archer CR-700 DHCP 跨网站脚本 | 79 | 未定义 | 未定义 | CVE-2016-10719 |