Medium severity5.4NVD Advisory· Published Sep 15, 2022· Updated Jun 17, 2026
CVE-2022-38814
CVE-2022-38814
Description
A stored cross-site scripting (XSS) vulnerability in the auth_settings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfg_loid text field.
Affected products
3- cpe:2.3:o:fiberhome:an5506-02-b_firmware:rp2521:*:*:*:*:*:*:*
- FiberHome/AN5506-02-Bdescription
- Range: vRP2521
Patches
Vulnerability mechanics
References
1- packetstormsecurity.com/files/168065/Fiberhome-AN5506-02-B-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.