We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Cross-Site Scripting (XSS) vulnerability exists in the ping diagnostic feature of FiberHome FD602GW-DX-R410 router (firmware V2.2.14), allowing an authenticated attacker to execute arbitrary JavaScript code in the context of the router s web interface. The vulnerability is triggered via user-supplied input in the ping form field, which fails to sanitize special characters. This can be exploited to hijack sessions or escalate privileges through social engineering or browser-based attacks.
Reserved 2025-06-16 | Published 2025-07-09 | Updated 2025-07-09 | Assigner mitregithub.com/...602gw-dx-r410-xss-advisory/blob/main/README.md
github.com/wrathfulDiety/CVE-2025-52357
Support options
