Stored Cross Site Scripting Vulnerability in Skyworth Router

Vulnerability

The vulnerability exists in the Skyworth Router CM5100, version 4.1.1.24, specifically in the web interface where the SMTP Server Name parameter is insufficiently validated. This allows an attacker to inject arbitrary scripts, leading to stored cross-site scripting (XSS). [1]

Exploitation

A remote attacker can exploit this vulnerability by providing specially crafted input to the SMTP Server Name parameter at the web interface. No authentication is mentioned as a prerequisite, indicating the attacker may have network access to the router's management interface. The injected script is then stored and executed when other users access the affected page. [1]

Impact

Successful exploitation allows the attacker to perform stored XSS attacks, potentially leading to session hijacking, defacement, or redirection to malicious sites. The impact is limited to the web interface context but could compromise administrator sessions and sensitive data. [1]

Mitigation

No fix has been disclosed in the available references. Users are advised to monitor vendor updates and consider limiting access to the web interface to trusted networks until a patch is released. [1]