← Back

CVE-2025-52687

nvd nist
Published: Jul 16, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
2.4
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Exploitability: 0.9 / Impact: 1.4
Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 (Secondary)

Description

Successful exploitation of the vulnerability could allow an attacker with administrator credentials for the access point to inject malicious JavaScript into the payload of web traffics, potentially leading to session hijacking and denial-of-service (DoS).

Related CWEs

CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (2)

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

Timeline

No history available yet.