Vulnerability Xss - TP-LINK TL-MR3220

vendor:

TL-MR3220

by:

Thiago 'THX' Sena

6,1

CVSS

MEDIUM

Cross-site scripting (XSS)

CWE

Product Name: TL-MR3220

Affected Version From: TL-MR3220

Affected Version To: TL-MR3220

Patch Exists: YES

Related CWE: CVE-2017-15291

CPE: h:tp-link:tl-mr3220

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows 10

2017

Vulnerability Xss – TP-LINK TL-MR3220

First you go to ( http://IP:PORT/ ) In the 'Wireless MAC Filtering' tab. Will add a new MAC Address. In 'Description' it will put the script ( <script>alert('XSS')</script> ) and complete the registration.

Mitigation:

Ensure that user-supplied input is properly sanitized and validated before being used in the application.

Source

Exploit-DB raw data:

# Exploit Title: Vulnerability Xss - TP-LINK TL-MR3220
# Date: 12/10/2017
# Exploit Author: Thiago "THX" Sena
# Vendor Homepage: http://www.tp-link.com.br
# Version: TL-MR3220
# Tested on: Windows 10
# CVE : CVE-2017-15291

Vulnerabilty: Cross-site scripting (XSS) in TP-LINK TL-MR3220
cve: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15291
---------------------------------------------------------------

PoC: 

0x01 - First you go to ( http://IP:PORT/ )

0x02 - In the 'Wireless MAC Filtering' tab. 

0x03 - Will add a new MAC Address.

0x04 - In 'Description' it will put the script ( <script>alert('XSS')</script> ) and complete the registration. 

0x05 - Xss Vulnerability

--------------------------------------------------------------