CVE-2014-4871

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-07 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote attackers to inject arbitrary web script or HTML via the wlWpaPsk parameter.

Affected products

Netcommwireless Nb604N: all versions
Netcommwireless Nb604N Firmware: through gan5.cz56t-b-nc.au-r4b010.en

References

http://www.kb.cert.org/vuls/id/941108
http://www.securityfocus.com/bid/70253
http://www.kb.cert.org/vuls/id/941108
http://www.securityfocus.com/bid/70253

Get alerted when CVE-2014-4871 or the next vulnerability affects your stack