Back to list
Thomson SpeedTouch 500 modems vulnerable to XSS
Feb 26 2006 12:53PM
preben watchcom no
Thomson SpeedTouch 500 series vulnerable to XSS
Cross Site Scripting
There consists a vulnerability in the SpeedTouch modems, which
can be exploited by malicious people to conduct cross-site scripting
attacks, and make a counseled user
Input passed to the LocalNetwork page isn't properly sanitized before being
returned to the user. This can be exploited to execute arbitrary HTML and
script code in a user's browser session in context of an affected site.
Such code can also be added through a proxy, because user validation
this user will become un-delete able if the code is crafted correctly.
PoC #1 - XSS
PoC #2 - Stealthy user (through proxy)
Check vendor's site for firmware upgrade.
As of this writing, none is available
PROVIDED AND DISCOVERED BY:
[ reply ]
Copyright 2010, SecurityFocus