CVE-2018-13323 describes a cross-site scripting (XSS) vulnerability in the detail.html component of Buffalo TS5600D1206 firmware version 3.61-0.10, allowing attackers to inject and execute JavaScript through a crafted "username" cookie. This medium-severity vulnerability (CVSS 6.1) can be exploited remotely with low complexity, requiring user interaction, and could lead to limited confidentiality and integrity impacts. While exploit intelligence shows no public Metasploit, Nuclei, or ExploitDB modules, and it is not listed in CISA's KEV catalog, there is also no community discussion or media coverage indicating active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.61-0.10CPE matchmatch criteria | cpe:2.3:o:buffalo:ts5600d1206_firmware:3.61-0.10:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.