CVE-2008-5869 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 1.5% (pctl 73)
Patch early
A public exploit exists.
Description
Cross-site scripting (XSS) vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to inject arbitrary web script or HTML via the system.sysName.0 SNMP OID.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| EPSS | 1.49% — more likely to be exploited than 73% of all CVEs |
| Weakness | CWE-79 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2009-01-08 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| proxim | tsunami mp.11 2411 |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Proxim Tsunami MP.11 2411 Wireless Access Point - 'system.sysName.0' SNMP HTML Injection | 2008-10-09 |
References
- http://securityreason.com/securityalert/4884
- http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-24
- http://www.securityfocus.com/archive/1/497182/100/0/threaded
- http://www.securityfocus.com/bid/31666
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45797
- http://securityreason.com/securityalert/4884
- http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-24
- http://www.securityfocus.com/archive/1/497182/100/0/threaded
- http://www.securityfocus.com/bid/31666
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45797
→ the Explorer · watch your stack · NVD