CVE-2022-45938

critical · 9

An issue was discovered in Comcast Defined Technologies microeisbss through 2021. An attacker can inject a stored XSS payload in the Device ID field under Inventory Management to achieve Remote Code Execution and privilege escalation..

CVSS

45.1%

EPSS (exploit prob.)

99th

EPSS percentile

2023-06-02

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weaknesses

CWE-79

Affected products

Vendor	Product	Affected versions
xfinity	comcast_defined_technologies_microeisbss	<= 2021

Check a specific version with /api/v1/cve/match.

References

https://my.xfinity.com/vulnerabilityreport
https://pensecure.medium.com/cve-2022-45938-f4c0d441da6f
https://my.xfinity.com/vulnerabilityreport
https://pensecure.medium.com/cve-2022-45938-f4c0d441da6f

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-45938