CVE-2023-37560

MediumCVSS 6.1

Published: 13/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

32th percentile - higher than 32% of all known CVEs

Summary

CVE-2023-37560 describes a cross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and earlier, allowing a remote unauthenticated attacker to inject arbitrary scripts.

Risk Assessment

An attacker could exploit this vulnerability to perform XSS attacks, potentially leading to user data theft or session hijacking.

Recommendation

It is recommended to update devices to the latest software versions that address this vulnerability.

Original NVD description (English source)

Cross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.