CVE-2022-38814: Fiberhome AN5506-02-B Firmware

Medium severity, CVSS 5.4. EPSS: 3.1% chance of exploitation in the next 30 days.

A stored cross-site scripting (XSS) vulnerability in the auth_settings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfg_loid text field.

Affected products

• Fiberhome AN5506-02-B Firmware: version rp2521 only

Published 2022-09-15. Last modified 2026-06-17.