CVE-2017-18483

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 7, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-184846.1Cognitoys Dino devices allow XSS via the SSID.CVE-2017-184855.4Cognitoys Dino devices allow profiles_add.html CSRF.CVE-2017-184867.2Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter.CVE-2017-184876.1The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.CVE-2017-184886.1The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.CVE-2017-184896.1The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS.CVE-2017-184906.1The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.CVE-2017-184916.1The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.CVE-2017-184926.1The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.CVE-2017-184936.1The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.CVE-2017-184946.1The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.CVE-2017-184956.1The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.
CVE-2017-18483: Medium severity, CVSS 6.1 | Vulnix