CVE-2023-51720

Summary

CVE-2023-51720 is a vulnerability affecting Skyworth Router CM5100 versions 4.1.1.24. The issue stems from insufficient input validation for the Time Server 1 parameter at the device's web interface. Malicious actors can leverage this vulnerability by delivering crafted inputs to the targeted system's web interface. Successful exploitation leads to Stored Cross-Site Scripting (XSS) attacks, allowing attackers to inject malicious scripts into the web pages viewed by other users, potentially leading to data theft or system compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.