CVE-2009-4196 describes multiple cross-site scripting (XSS) vulnerabilities in the Huawei MT882 V100R002B020 ARG-T router firmware 3.7.9.98. These flaws allow remote attackers to inject arbitrary web script or HTML through various parameters in several Forms/ scripts. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with medium access complexity, requiring no authentication, and impacting integrity. Successful exploitation could lead to client-side script execution, potentially compromising user sessions or defacing web content. While there is no evidence of active exploitation (KEV list inactive), an exploit is publicly available on ExploitDB. The CVE has received minimal community discussion and media coverage, suggesting low public awareness despite the existence of exploit code.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
firmware_3.7.9.98CPE matchmatch criteria | cpe:2.3:h:huawei:mt882_v100t002b020_arg-t:firmware_3.7.9.98:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:N/I:P/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.