Stored Cross Site Scripting Vulnerability in Skyworth Router

Vulnerability

The Skyworth Router CM5100, version 4.1.1.24, contains a stored cross-site scripting (XSS) vulnerability in the Device Name parameter at its web interface. The application fails to properly validate or sanitize user-supplied input before storing it, allowing malicious scripts to be embedded [1].

Exploitation

A remote attacker can exploit this vulnerability by supplying specially crafted input to the Device Name parameter via the web interface. The malicious payload is stored on the device and executed when the affected page is loaded, without requiring any additional user interaction beyond accessing the interface [1].

Impact

Successful exploitation allows the attacker to execute arbitrary JavaScript in the context of the router's web interface. This can lead to session hijacking, defacement, or redirection to malicious sites. Because the XSS is stored, the payload persists and affects any user who views the affected page [1].

Mitigation

As of the publication date, no official patch or workaround has been disclosed in the available references. Users are advised to monitor vendor updates and restrict network access to the router's web interface to trusted users only [1].