CVE-2022-36325: siemens ruggedcom_rm1224_lte\(4g\)_eu_firmware

Vulnerability summary

CVE-2022-36325 is a medium (CVSS 6.8) vulnerability in siemens ruggedcom_rm1224_lte\(4g\)_eu_firmware. EPSS estimates a 0.96% chance of exploitation in the next 30 days, higher than 60.7% of scored vulnerabilities.

Timeline

1. 10-08-2022
   PublishedVulnerability first disclosed.
2. 14-04-2026
   Last modifiedVulnerability information updated.

Description

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.

• CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.