CVE-2023-36146

MediumCVSS 5.4

Published: 30/06/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

37th percentile - higher than 37% of all known CVEs

Summary

A stored Cross-Site Scripting (XSS) vulnerability was found in firmware version 2.2.6733 of the Multilaser RE 170 router. It allows an attacker to inject a malicious script that will execute in other users' browsers.

Risk Assessment

The risk involves potential session hijacking, credential theft, or unauthorized actions performed in the context of a logged-in network administrator.

Recommendation

Immediately update the router firmware to the latest patched version if available. Otherwise, consider replacing the device with a model not affected by this vulnerability.

Original NVD description (English source)

A Stored Cross-Site Scripting (XSS) vulnerability was found in Multilaser RE 170 using firmware 2.2.6733.