Vulnerability Details CVE-2017-16836
Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajax_managed_services.php service parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.6%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2017-16836
-
cpe:2.3:h:commscope:arris_tg1682g:-
-
cpe:2.3:o:commscope:arris_tg1682g_firmware:10.0.59.sip.pc20.ct