CVE-2022-23083

· MEDIUMModified

← All CVEs

CVSS v3.1

6.1

EPSS

0.72%

Published

Jan 18, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

NetMaster 12.2 Network Management for TCP/IP and NetMaster File Transfer Management contain a XSS (Cross-Site Scripting) vulnerability in ReportCenter UI due to insufficient input validation that could potentially allow an attacker to execute code on the affected machine.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

CWE-79

Affected Products (2)

broadcom · netmaster_file_transfer_managementvulnerable

broadcom · netmaster_network_management_for_tcp\/ipvulnerable

References (2)

https://support.broadcom.com/external/content/security-advisories/NetMaster-12.2-ReportCenter-Vulnerability-CVE-2022-23083/20049

Permissions RequiredVendor Advisory

https://support.broadcom.com/external/content/security-advisories/NetMaster-12.2-ReportCenter-Vulnerability-CVE-2022-23083/20049

Permissions RequiredVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs