Back to Database
Status published
Medium
CVE-2014-8653
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-8653
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5203.php
- http://www.securityfocus.com/bid/70762
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98328
- http://www.exploit-db.com/exploits/35075
- http://packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html
- http://osvdb.org/show/osvdb/113839
More from compal broadband networks
View All →CVE-2014-8657
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway...
Medium
5
CVE-2014-8656
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway...
Critical
10
CVE-2014-8655
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway...
Medium
5
CVE-2014-8654
Multiple cross-site request forgery (CSRF) vulnerabilities in Compal Broadband Networks...
Medium
6.8
Affected Vendor
compal broadband networks
View all reports →Affected Software
firmware, cg6640e wireless gateway, ch664oe wireless gateway
Vulnerable Versions:
ch6640-3.5.11.7-nosh, 1.0
Timeline
Official Publish:
November 6th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.