What’s Vulnerable › Vulnerabilities

CVE-2025-2191: Claro A7600-A1 Ping6 Diagnóstico form2pingv6.cgi cross site scripting

• Severity: low (CVSS 2.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-11 · updated 2026-06-17
• Weakness: CWE-79

Description

A vulnerability, which was classified as problematic, has been found in Claro A7600-A1 RNR4-A72T-2x16_v2110403_CLA_32_160817. Affected by this issue is some unknown functionality of the file /form2pingv6.cgi of the component Ping6 Diagnóstico. The manipulation of the argument ip6addr with the input <img/src/onerror=prompt(8)> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

• Claro A7600-A1: RNR4-A72T-2x16_v2110403_CLA_32_160817

References

• https://vuldb.com/?ctiid.299216
• https://vuldb.com/?id.299216
• https://vuldb.com/?submit.511700

Get alerted when CVE-2025-2191 or the next vulnerability affects your stack