CVE-2018-20379

Severity: medium (CVSS 4.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-12-23 · updated 2026-06-17
Weakness: CWE-79

Description

Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross Protocol Injection attack with setSSID of 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.1.1.3.10001.

Affected products

Technicolor Dpc3928Sl Firmware: d3928sl-psip-13-a010-c3420r55105-160428a

References

https://misteralfa-hack.blogspot.com/2018/12/cisco-dpc3928sl-explotando-un-xss-via.html
https://misteralfa-hack.blogspot.com/2018/12/cisco-dpc3928sl-explotando-un-xss-via.html

Get alerted when CVE-2018-20379 or the next vulnerability affects your stack