CVE-2014-1612

MEDIUM 4.3CVE-2014-1612 · Published 30/01/2014 · updated 17/06/2026

In short

CVE-2014-1612 is a MEDIUM (CVSS 4.3) vulnerability affecting mediatrix voip gateway 4402 firmware (media5).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 85.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mediatrix voip gateway 4402 firmware media5	`= dgw_1.1.13.186`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.

References

osvdb.org/102415
packetstormsecurity.com/files/124931/Mediatrix-4402-Cross-Site-Scripting.html
secunia.com/advisories/56638
kb.cert.org/vuls/id/252294 · US Government Resource
securityfocus.com/archive/1/530871/100/0/threaded
securityfocus.com/bid/65108
exchange.xforce.ibmcloud.com/vulnerabilities/90656

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free