CVE-2014-8653
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E...
CVE-2014-8653 is a medium vulnerability (CVSS 4.3) in Compal Broadband Networks Cg6640e Wireless Gateway, published November 6, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.50%, the 89th percentile. No source names a fixed version.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 3.50%EPSS, 89th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | CBN CH6640E/CG6640E Wireless Gateway Series - Multiple Vulnerabilities | 2014-10-27 |
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie.
- Record
CVE-2014-8653- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE ListNo score
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie.
- Record
CVE-2014-8653- Updated
- 2026-11-02
EUVDEUVD-2014-8489No score
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie.
- Record
EUVD-2014-8489- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7fxh-fwr6-5j8cNo score
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E...
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie.
- Record
GHSA-7fxh-fwr6-5j8c- Weakness
- CWE-79
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
zeroscience.mk/en/vulnerabilities/ZSL-2014-5203.php
securityfocus.com/bid/70762
exchange.xforce.ibmcloud.com/vulnerabilities/98328
exploit-db.com/exploits/35075
packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html
osvdb.org/show/osvdb/113839
nvd.nist.gov/vuln/detail/CVE-2014-8653
github.com/advisories/GHSA-7fxh-fwr6-5j8c