CVE-2023-51724 MEDIUM

CVE-2023-51724: Stored Cross Site Scripting Vulnerability in Skyworth Router

Vendor Hathway
Product Skyworth Router CM5100
Weakness CWE-79 · XSS
Published January 17, 2024
Last update June 17, 2025

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N

What the vulnerability does

01Description

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the URL parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of the vulnerable targeted system. Successful exploitation of this vulnerability could allow the attacker to perform stored XSS attacks on the targeted system.

Key dates

02Disclosure timeline

January 17, 2024 CVE published
June 17, 2025 Record updated

Related vulnerabilities

04Related CVE