CVE-2018-8062: Comtrend Ar-5387un Firmware

Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04_R02.A2pD035g.d23i firmware allows remote attackers to inject arbitrary web script or HTML via the Service Description parameter while creating a WAN service.

Affected products

• Comtrend Ar-5387un Firmware: version a731-410jaz-c04_r02.a2pd035g.d23i only

Published 2020-10-23. Last modified 2026-06-17.