CVE-2017-16836
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 2.0%
from disclosure to weapon0 days
Published on NVDNov 16
1st PoCNov 9
exploitation probability
2.0%top 21% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajax_managed_services.php service parameter.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/38657unverifiedcve_referencepacketstormsecurity.com/files/134288/Arris-TG1682G-Modem-Cross-Site-Scripting.htmlunverifiedcve_referencewww.exploit-db.com/exploits/38657/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.