« Volver al listado

CVE-2007-2970

Estado: ModificadaMedia (4.3)—

Multiple cross-site scripting (XSS) vulnerabilities in cgi/block.cgi in 8e6 R3000 Internet Filter allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) CAT, and (3) USER parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

8E6 Technologies — R3000 Internet Filter

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-2970",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-06-01T01:30:00.000",
  "references": [
    {
      "url": "http://osvdb.org/36706",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/25448",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/24206",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34544",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/36706",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/25448",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/24206",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34544",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple cross-site scripting (XSS) vulnerabilities in cgi/block.cgi in 8e6 R3000 Internet Filter allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) CAT, and (3) USER parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el cgi/block.cgi del Filtro de Internet 8e6 R3000 permiten a atacantes remotos la inyección secuencias de comandos web o HTML de su elección a través de los parámetros (1) URL, (2) CAT y (3) USER. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen únicamente a partir de la información de terceros."
    }
  ],
  "lastModified": "2026-06-16T22:40:48.310",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:8e6_technologies:r3000_internet_filter:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A43F18DF-F401-4901-8132-5EE5B59AFC02"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "vendorComments": [
    {
      "comment": "I am pleased to inform you that we have released an update (version 2.0.05) which addresses this issue.\n \nAll 8e6 customers with a current license will automatically download this update, and can install it once the download is complete. \n \nThis update was placed on our update servers on Thu Jul  5 16:32:57 PDT 2007.\n \nFurther information can be found at:\nhttp://www.8e6.com/products/R3000/patches/r3000_patches.htm",
      "lastModified": "2007-07-06T00:00:00",
      "organization": "8e6 Technologies"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}