BDCOM P3310D Cross-Site Scripting Vulnerability in New RMON Statistics Page

A cross-site scripting (XSS) vulnerability has been identified in the BDCOM P3310D router, specifically in the BIOS version 0.4.2 10.1.0F Build 86345. The issue arises within the New RMON Statistics Page, where the application fails to properly sanitize user input in the 'Owner' parameter. This lack of input validation allows the injection of malicious payloads, which are stored and executed when the RMON Statistics page is accessed. As a result, an authenticated administrator could be exposed to session hijacking or unauthorized actions.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the RMON Statistics page.