CVE-2023-2387

CVE-2023-2387 is a cross-site scripting (XSS) vulnerability affecting Netgear SRX5308 routers running firmware up to version 4.3.5-3. Specifically, the vulnerability resides in the Web Management Interface, allowing an attacker to inject malicious scripts via the 'winsServer1' argument within the 'scgi-bin/platform.cgi?page=dmz_setup.htm' file. This vulnerability has a CVSS v3.1 score of 4.8 (Medium), indicating a network-based attack with low attack complexity, requiring high privileges and user interaction. A successful exploit could lead to limited confidentiality and integrity impacts, such as session hijacking or defacement, but not availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation, nor are there readily available exploit modules in common frameworks like Metasploit or Nuclei. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and attention.