CVE-2022-39996: Teldat RS123 Firmware

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to the upgrade/query.php page.

Affected products

• Teldat RS123 Firmware: affected versions not specified
• Teldat RS123W Firmware: affected versions not specified

Published 2024-08-27. Last modified 2026-06-17.