Datacom DM955 Wireless Basic Settings Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the Datacom DM955 5GT 1200, version 825.8010.00. The issue arises in the Wireless Basic Settings component, where the SSID field can be manipulated to inject malicious scripts. This vulnerability can be exploited remotely, but requires user interaction.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, access the Datacom DM955 5GT 1200 management application and navigate to the Wireless Basic Settings. Modify the SSID field by injecting a script, such as a simple alert script. This will demonstrate the cross-site scripting vulnerability by executing the injected script in the browser.