cve/2023/CVE-2023-49965.md

CVE-2023-49965

Description

SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page.

POC

Reference

• https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-eng/

Github

• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/hackintoanetwork/SpaceX-Starlink-Router-Gen-2-XSS
• https://github.com/hackintoanetwork/hackintoanetwork
• https://github.com/nomi-sec/PoC-in-GitHub