vendor:
WVC54GCA Wireless-G Internet Home Monitoring Camera
by:
7.5
CVSS
HIGH
Cross-Site Scripting
79
CWE
Product Name: WVC54GCA Wireless-G Internet Home Monitoring Camera
Affected Version From: 1.00R22
Affected Version To: 1.00R24
Patch Exists: NO
Related CWE:
CPE: h:linksys:wvc54gca_firmware:1.00r22
Platforms Tested:
Linksys WVC54GCA Wireless-G Internet Home Monitoring Camera Multiple Cross-Site Scripting Vulnerabilities
The Linksys WVC54GCA Wireless-G Internet Home Monitoring Camera is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Mitigation:
Update to the latest firmware version to mitigate these vulnerabilities. No other mitigation or remediation information is available.