CVE-2017-2148

https://notcve.org/view.php?id=CVE-2017-2148

Cross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en firmware WN-AC1167GR version 1.0.4 y anteriores, que permitiría a un atacante remoto autenticado inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados. • http://jvn.jp/en/jp/JVN01537659/index.html http://www.iodata.jp/support/information/2017/wn-ac1167gr http://www.securityfocus.com/bid/97714 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •