Stored Cross Site Scripting Vulnerability in Skyworth Router

Vulnerability

The Skyworth Router CM5100, version 4.1.1.24, contains a stored cross-site scripting (XSS) vulnerability in the Time Server 2 parameter at its web interface. The router fails to properly validate user-supplied input, enabling an attacker to inject malicious scripts that are stored and later executed [1].

Exploitation

A remote attacker with network access to the router's web interface can exploit this vulnerability by submitting specially crafted input to the Time Server 2 parameter. No authentication is explicitly required in the description, but the attacker must be able to reach the web interface. The injected script is stored on the device and triggers when an administrator or other user views the affected page [1].

Impact

Successful exploitation allows the attacker to perform stored XSS attacks, potentially leading to session hijacking, defacement, redirection to malicious sites, or theft of sensitive information. The impact compromises the confidentiality and integrity of the targeted system [1].

Mitigation

No official fix has been disclosed in the available references. Users should monitor vendor advisories for firmware updates. As of the publication date (2024-01-17), no workaround or patch is provided [1].