CVE-2022-45938

Summary

An issue was discovered in Comcast Defined Technologies microeisbss through 2021. An attacker can inject a stored XSS payload in the Device ID field under Inventory Management to achieve Remote Code Execution and privilege escalation..

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://my.xfinity.com/vulnerabilityreport
• https://pensecure.medium.com/cve-2022-45938-f4c0d441da6f

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://my.xfinity.com/vulnerabilityreport
• https://pensecure.medium.com/cve-2022-45938-f4c0d441da6f

• ←Previous
• Next→