Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-10546

Cross-Site Scripting (XSS) Vulnerability in PPC XPON ONT Wi-Fi Router

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERT-In

Description

This vulnerability exist in PPC 2K15X Router, due to improper input validation for the Common Gateway Interface (CGI) parameters at its web management portal. A remote attacker could exploit this vulnerability by injecting malicious JavaScript into the vulnerable parameter, leading to a reflected Cross-Site Scripting (XSS) attack on the targeted system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PPC Technologies PPC XPON ONT (Optical Network Terminal) 2K15X

Default version status: unaffected

  • v2.3.15PPCLaffected
  • v1.0.3affected

References